[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-22 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Tim Starling  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution||FIXED

--- Comment #47 from Tim Starling  2011-06-22 23:17:10 
UTC ---
It's probably easier to keep bug 29531 separate, since it doesn't seem to be
very closely related to this bug.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-22 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #46 from p858snake  2011-06-22 22:43:54 UTC ---
Mark: Please explain why you reopened this bug.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-22 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Mark A. Hershberger  changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|FIXED   |

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-22 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Mark A. Hershberger  changed:

   What|Removed |Added

 CC||foma...@googlemail.com

--- Comment #45 from Mark A. Hershberger  2011-06-22 
18:46:45 UTC ---
*** Bug 29531 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-07 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Roan Kattouw  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution||FIXED

--- Comment #44 from Roan Kattouw  2011-06-07 20:32:55 
UTC ---
(In reply to comment #41)
> Shouldn't r89397 be tagged with 1.17, 1.17wmf1?
> OT: When do (ports of) these revisions land on the 1.17 branch?
Tim's already merged them, apparently.

(In reply to comment #43)
> (In reply to comment #40)
> > Can this ticket be closed now or is there still something pending ?
> 
> Roan can close it once he has reviewed the patch.  This is the last real
> blocker to 1.17.  No pressure, though. ;)
Tim's code is fine, closing this bug.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #43 from Mark A. Hershberger  2011-06-07 
02:11:41 UTC ---
(In reply to comment #40)
> Can this ticket be closed now or is there still something pending ?

Roan can close it once he has reviewed the patch.  This is the last real
blocker to 1.17.  No pressure, though. ;)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #42 from Roan Kattouw  2011-06-06 17:42:50 
UTC ---
(In reply to comment #41)
> Shouldn't r89397 be tagged with 1.17, 1.17wmf1?
It will be once I review it.

> OT: When do (ports of) these revisions land on the 1.17 branch?
Probably this week.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #41 from Paul Oranje  2011-06-06 17:16:25 UTC 
---
Shouldn't r89397 be tagged with 1.17, 1.17wmf1?
OT: When do (ports of) these revisions land on the 1.17 branch?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Krinkle  changed:

   What|Removed |Added

 CC||krinklem...@gmail.com

--- Comment #40 from Krinkle  2011-06-06 16:54:41 UTC ---
(In reply to comment #39)
> (In reply to comment #37)
> > One possible way to make it break less things would be to have it redirect 
> > to a
> > safe equivalent of the same URL, instead of showing an error page.
> 
> Done in r89397.

Can this ticket be closed now or is there still something pending ?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-02 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #39 from Tim Starling  2011-06-03 05:49:19 
UTC ---
(In reply to comment #37)
> One possible way to make it break less things would be to have it redirect to 
> a
> safe equivalent of the same URL, instead of showing an error page.

Done in r89397.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-06-02 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Rob Lanphier  changed:

   What|Removed |Added

 CC||ro...@wikimedia.org
 Blocks||26676

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Michael Dale  changed:

   What|Removed |Added

 CC||d...@ucsc.edu

--- Comment #38 from Michael Dale  2011-06-01 02:59:33 UTC ---
bug 29224 is related patch for the RL start-up module names not using Packed
Module String

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #37 from Tim Starling  2011-06-01 02:56:16 
UTC ---
It should be somewhat better as of r89249. It should mostly only block requests
that have dots in the last parameter of the query string now. 

One possible way to make it break less things would be to have it redirect to a
safe equivalent of the same URL, instead of showing an error page. It wouldn't
help with POST requests that have some parameters in the URL, and it wouldn't
help with API clients that don't understand redirects, but at least it would
fix any JavaScript client issues. What do you think?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Krinkle  changed:

   What|Removed |Added

 CC||tpars...@wikimedia.org
  Component|History/Diffs   |Javascript

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #36 from Tim Starling  2011-05-31 23:56:34 
UTC ---
We can fix a few more special cases, but there's not going to be a solution for
this that can allow any arbitrary api.php or action=raw request.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #35 from Derk-Jan Hartman  2011-05-31 
12:36:09 UTC ---
(In reply to comment #34)
> Well brion and I myself experienced issues after r3 it seems. At least I
> had my trunk up to date, and I doubt that brion wasn't using up to date trunk.

He actually specifically says: "I still see this on trunk in r88997"

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #34 from Derk-Jan Hartman  2011-05-31 
12:35:20 UTC ---
Well brion and I myself experienced issues after r3 it seems. At least I
had my trunk up to date, and I doubt that brion wasn't using up to date trunk.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-30 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #33 from Tim Starling  2011-05-31 00:37:44 
UTC ---
It should be fixed as of r3, to be released soon.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-29 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Derk-Jan Hartman  changed:

   What|Removed |Added

 CC||hart...@videolan.org

--- Comment #32 from Derk-Jan Hartman  2011-05-29 
11:10:28 UTC ---
So it this going anywhere ? Cause it is heavily breaking other platforms atm,
i'm starting to nudge towards 'revert and IE6 is no longer supported + banner
"upgrade your browser"'.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Brion Vibber  changed:

   What|Removed |Added

 Blocks|29177   |27699

--- Comment #31 from Brion Vibber  2011-05-27 23:47:33 UTC 
---
(Fixing deps/blockers; RL, API, and action=raw failures here all affect
TimedMediaHandler: bug 27699).

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Brion Vibber  changed:

   What|Removed |Added

 Blocks||29177

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Brion Vibber  changed:

   What|Removed |Added

 Blocks|21587   |

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Brion Vibber  changed:

   What|Removed |Added

 Blocks||21587

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #30 from Brion Vibber  2011-05-27 21:32:13 UTC 
---
And... also for perfectly legit API hits!

http://stormcloud.local/trunk/api.php?list=allpages&apprefix=Folgers_local_prototype.ogv&apnamespace=700&aplimit=200&prop=revisions&action=query&format=json

http://stormcloud.local/trunk/api.php?action=parse&page=File%3AFolgers_local_prototype.ogv&smaxage=3600&maxage=3600&format=json

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #29 from Brion Vibber  2011-05-27 21:29:38 UTC 
---
I also see this for some things still using legacy action=raw to load site css
pages, such as [[MediaWiki:Filepage.css]] being loaded by ImagePage:

http://stormcloud.local/trunk/index.php?title=MediaWiki:Filepage.css&action=raw&maxage=18000&usemsgcache=yes&ctype=text%2Fcss&smaxage=18000

ForbiddenForbiddenInvalid
file extension found in PATH_INFO or QUERY_STRING. Raw pages must be accessed
through the primary script entry point.

Manually adding a '&*' on the end of the URL resolves it (as does removing the
'.' from the '.css' though obviously then it doesn't load!)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Brion Vibber  changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|FIXED   |

--- Comment #28 from Brion Vibber  2011-05-27 21:08:44 UTC 
---
I still see this on trunk in r88997, and it's affecting Firefox 4 not just IE.

Reproduce:
1) Enable MwEmbedSupport extension in LocalSettings.php:
require( "$IP/extensions/MwEmbedSupport/MwEmbedSupport.php" );

2) Load up a page on the wiki

3) See a 403 Forbidden error for load.php of some initial modules, and JS
errors due to jQuery and mw not being loaded by:

http://stormcloud.local/trunk/load.php?debug=true&lang=en&modules=jquery%7Cmediawiki%7Cjquery.triggerQueueCallback%7Cjquery.mwEmbedUtil%7Cmw.MwEmbedSupport&only=scripts&skin=vector&version=20110526T174802Z

ForbiddenForbiddenInvalid
file extension found in PATH_INFO or QUERY_STRING.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Mark A. Hershberger  changed:

   What|Removed |Added

   Keywords|need-review |reviewed

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #27 from Paul Oranje  2011-05-26 21:52:36 UTC 
---
Will the patch be applied onto branches/REL1_17 (and when) so that the fix can
be got with svn update?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Roan Kattouw  changed:

   What|Removed |Added

 CC||p.ora...@xs4all.nl

--- Comment #26 from Roan Kattouw  2011-05-26 20:37:29 
UTC ---
*** Bug 29158 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

--- Comment #25 from Mark A. Hershberger  2011-05-26 
18:54:42 UTC ---
*** Bug 28962 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Roan Kattouw  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED

--- Comment #24 from Roan Kattouw  2011-05-26 09:50:04 
UTC ---
Fixed in r3.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Bawolff  changed:

   What|Removed |Added

 Blocks||28962

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 28840] Loader broken in IE because mediawiki thinks the periods in module names is a security leak (spoof extension)

2011-05-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=28840

Krinkle  changed:

   What|Removed |Added

Summary|Diffs not displaying|Loader broken in IE because
   |correctly in IE because |mediawiki thinks the
   |mediawiki thinks the|periods in module names is
   |periods in module names |a security leak (spoof
   |during load requests is |extension)
   |someone trying to spoof |
   |extension and do the evil   |
   |IE6 thing   |

--- Comment #23 from Krinkle  2011-05-21 16:42:44 UTC ---
Making the summary sane and shorter.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l