Media Wiki:MediaWiki 1.5.8

March 26, 2006

MediaWiki 1.5.8 is a security and bugfix maintenance release.

A bug in decoding of certain encoded links could allow injection of raw HTML into page output; this could potentially lead to XSS attacks.

Some minor UI fixes were also made, see the change log at the bottom of this file.

(bug 5180) User login page shows inappropriate email blurb
Add the "AbortNewAccount" hook on account creation; see hooks.txt for more info.
Update default "exporttext" to reflect that Special:Import exists
Add links to useful material to the default main page content
Fix fragment HTML injection