On Thu, Feb 16, 2012 at 3:54 PM, Thomas Gries <m...@tgries.de> wrote:
> Basically, after some checks, it sets
> $wgResourceLoaderMaxQueryLength=min($wgResourceLoaderMaxQueryLength,ini_get("suhosin.get.max_name_length"));That doesn't look right. http://www.hardened-php.net/suhosin/configuration.html#suhosin.get.max_name_length suhosin.get.max_name_length defaults to 64 because that is only testing the length of a single key in the URL. There doesn't appear to be a straightforward mapping between Suhosin config and $wgResourceLoaderMaxQueryLength. For example, this calculation appears to produce the maximum query string length (including the ?). suhosin.get.max_vars * (suhosin.get.max_totalname_length + suhosin.get.max_value_length + 1) + suhosin.get.max_vars However, all likely occurrences of query strings at that length will fail the Suhosin filters (because there will be many more, smaller keys/values). In any case, 64 as a limit for $wgResourceLoaderMaxQueryLength seems much to small. ~Rusty _______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
