[Pkg-mediawiki-devel] [MediaWiki-announce] MediaWiki Security Release: 1.20.4 and 1.19.5

[Thorsten Glaser]

On Mon, 15 Apr 2013, Chris Steipp wrote:

> https://www.mediawiki.org/wiki/Extension:RSS

There are two calls to DOMDocument->loadXML in the
ImageMap extension – do they also need to be wrapped
like in
https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/extensions/RSS.git;a=commitdiff;h=05e4e8fa649f85f4955eb0c3a2b33d639661f852
or are they “good”? (They seem to be generated internally,
which suggests the latter.)

Thanks,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-314
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Boris Esser, Sebastian Mancke