summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2019-06-07Removes some broken tests from ApiBlockTestREL1_30Reedy
2019-06-07Fix merge conflicts in ApiBlockTest.phpReedy
2019-06-06Prepare 1.30.21.30.2Reedy
2019-06-06Add RELEASE-NOTES for security patchesReedy
2019-06-04SECURITY: resources: Patch jQuery 1.11.3 for CVE-2019-11358James D. Forrester
2019-05-30SECURITY: Add permission check for user is permitted to view the log typerxy
2019-05-30SECURITY: Add permission check for user is permitted to view the log typerxy
2019-05-30SECURITY: Fix cache mode for (un)patrolled recent changes queryLucas Werkmeister
2019-05-30SECURITY: API: Respect $wgBlockCIDRLimit in action=blockKunal Mehta
2019-05-30SECURITY: rate-limit and prevent blocked users from changing emailBrian Wolff
2019-05-30SECURITY: blacklist CSS var()Max Semenik
2019-05-30SECURITY: Fix reauth in Special:ChangeEmailBrian Wolff
2019-05-29Add getLoginSecurityLevel() support to FormSpecialPageBrad Jorsch
2019-05-28Add/update RELEASE-NOTES to match commitsReedy
2019-05-28Make config-outdated-sqlite parameter numbers consistent with config-*-oldReedy
2019-05-24resourceloader: Use AND instead of OR for upsert conds in saveFileDependencies()Reedy
2019-04-25ApiLogout: Follow up Icb674095Brad Jorsch
2019-04-25New helper ApiTestCase::setExpectedApiException()Aryeh Gregor
2019-04-25[SECURITY] [API BREAKING CHANGE] Require logout token.sbassett
2019-03-21Rearrange code in User::getBlockedStatus to avoid isAllowed callsGergő Tisza
2019-03-21Replace $wgUser with RequestContext::getUser in User::getBlockedStatusGergő Tisza
2019-02-26RELEASE-NOTES for last two commitsReedy
2019-02-26Return the page_id in list=langbacklinks as an intReedy
2019-02-26Return the page_id in list=iwbacklinks as an int rather than stringsetian
2019-02-07Removes Google web search from exception pageJuan Osorio
2019-02-07MWExceptionRenderer: Fix db error outage pageStrainu
2019-01-16Avoid session double-start in Setup.phpBrad Jorsch
2019-01-12rdbms: reduce LoadBalancer replication log spamAaron Schulz
2018-12-19Merge "i18n: Clarify the default sidebar 'Help' link is about MediaWiki itsel...jenkins-bot
2018-12-18Fix copy-paste errorAmir Sarabadani
2018-12-18i18n: Clarify the default sidebar 'Help' link is about MediaWiki itselfAndre Klapper
2018-10-25Merge "Don't pass a MailAddress pass the email to mail()" into REL1_30jenkins-bot
2018-10-24composer.json, require ext-fileinfoaddshore
2018-10-21Don't pass a MailAddress pass the email to mail()Reedy
2018-10-21SECURITY: Don't allow loading unprotected JS filesBrian Wolff
2018-10-21SECURITY: Disallow loading JS/CSS/Json subpages from unregistered users and logBrian Wolff
2018-10-21installer: Don't link to the obsolete "Extension Matrix" pageZoranzoki21
2018-10-20Include IP address in "Login for $1 succeeded" log entryKunal Mehta
2018-10-11Merge "Remove deprecated pear/mail_mime-decode from composer suggestions" int...jenkins-bot
2018-10-11Update git submodulesReedy
2018-10-11Remove deprecated pear/mail_mime-decode from composer suggestionsReedy
2018-09-20WatchedItemStore::countVisitingWatchersMultiple() shouldn't query all titles ...Brad Jorsch
2018-09-20Bump 1.30.11.30.1Kunal Mehta
2018-09-20SECURITY: Don't exclude .htaccess files from `git archive`Kunal Mehta
2018-09-20SECURITY: Do not allow botpassword login if account locked.Brian Wolff
2018-09-20SECURITY: Make 'newbie' limit in $wgRateLimits really override 'user' limitChad Horohoe
2018-08-29Fix bogus DatabaseOracle::__construct() calls in OracleInstallerAaron Schulz
2018-08-28Explicitly require Postgres 9.1Kunal Mehta
2018-08-28UsersPager: Fix typo in formDescriptor arrayJayprakash12345
2018-08-01Fix total breakage of SQLite web upgradeTim Starling