wiki.techinc.nl/includes/content
Bartosz Dziewoński 275dec4f18 SECURITY: Fix use of EditFilterMergedContent hook when changing content model
The logic in ContentModelChange class now matches the
EditFilterMergedContentHookConstraint class.

Now it aborts processing when an extension has set the status,
but did not return false from its hook handler.

CVE-2021-44856

Bug: T271037
Change-Id: Ic9d5fba7218d3cc8afc499199616754888610b70
2021-12-15 16:12:39 +00:00
..
Hook Remove deprecated hook 'SecondaryDataUpdate'. 2021-07-21 17:36:24 -07:00
Renderer Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
Transform Move Content::preloadTransform to ContentHandler 2021-08-17 15:17:34 +00:00
AbstractContent.php Introduce Redirect(Lookup&Store) services to handle redirects 2021-12-01 19:14:22 +01:00
CodeContentHandler.php Merge "Replace "@stable for subclassing" with "@stable to extend"" 2020-07-13 09:31:38 +00:00
Content.php Introduce Redirect(Lookup&Store) services to handle redirects 2021-12-01 19:14:22 +01:00
ContentHandler.php Merge "Hard-deprecate Content::prepareSave." 2021-11-23 11:20:21 +00:00
ContentHandlerFactory.php Cleanup to PageUpdaterFactory and tests 2021-07-20 09:11:13 +00:00
ContentModelChange.php SECURITY: Fix use of EditFilterMergedContent hook when changing content model 2021-12-15 16:12:39 +00:00
CssContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
CssContentHandler.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
FallbackContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
FallbackContentHandler.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
FileContentHandler.php Unsuppress more phan issues (part 5) 2019-09-01 09:48:31 +00:00
IContentHandlerFactory.php Don't use a dynamic hook name when calling a hook 2020-02-25 13:42:30 +11:00
JavaScriptContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
JavaScriptContentHandler.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
JsonContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
JsonContentHandler.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
MessageContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
TextContent.php Move Content::getParserOutput & AbstractContent::fillParserOutput to ContentHandler 2021-09-29 13:10:51 +03:00
TextContentHandler.php Call getHtml on the content object, not TextContent 2021-10-03 23:12:42 +02:00
ValidationParams.php Move Content::prepareSave to ContentHandler 2021-11-11 15:40:42 +02:00
WikitextContent.php Allow inserting new sections named '0' 2021-11-19 22:13:58 -05:00
WikitextContentHandler.php Introduce Redirect(Lookup&Store) services to handle redirects 2021-12-01 19:14:22 +01:00
WikiTextStructure.php Rename ParserOutput::{get,set,unset}Property to {get,set,unset}PageProperty 2021-10-08 10:07:17 -04:00