diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 40ba59a21ae..c81da17fdcd 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -293,8 +293,8 @@ it from source control: http://www.mediawiki.org/wiki/Download_from_SVN * Don't show non-functional toolbar buttons on Opera 7 anymore * (bug 9151) Fix relative subpage links with section fragments * (bug 10560) Adding a space between category letter heading and "continues" -* Security fix: Disable retrieving pages as raw js/css that should not contain - such content. +* Don't allow retrieving non-JavaScript/CSS pages with "text/css" or "text/javascript" + MIME types == API changes since 1.10 == diff --git a/includes/RawPage.php b/includes/RawPage.php index 96f3848cf29..f81349a27a6 100644 --- a/includes/RawPage.php +++ b/includes/RawPage.php @@ -151,7 +151,7 @@ class RawPage { $dangerousTypes = array( $wgJsMimeType, 'text/css' ); if ( in_array( $this->mContentType, $dangerousTypes ) && !($this->mTitle->isCssOrJsPage() || $this->mTitle->isCssJsSubpage() ) ) - return '/* Page type not compatible with requested mime type. */'; + return '/* Page type not compatible with requested MIME type. */'; if($this->mGen) { $sk = $wgUser->getSkin();