* Blacklist redirects via Special:Filepath, hard to use.

Committing Tim's fixes...

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index b9cc0cc..7faba68 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -347,6 +347,7 @@ The following extensions are migrated into MediaWiki 1.14:
 * Safer handling of non-MediaWiki exceptions -- now obeys our settings for
   formatting and path exposure.
 * Less verbose errors from profileinfo.php when not configured
+* Blacklist redirects via Special:Filepath, hard to use.
 
 
 === API changes in 1.14 ===

diff --git a/includes/Title.php b/includes/Title.php
index 9bdfb82..9be7ace 100644 (file)
--- a/includes/Title.php
+++ b/includes/Title.php
@@ -316,9 +316,13 @@ class Title {
                                        $m[1] = urldecode( ltrim( $m[1], ':' ) );
                                }
                                $title = Title::newFromText( $m[1] );
-                               // Redirects to Special:Userlogout are not permitted
-                               if( $title instanceof Title && !$title->isSpecial( 'Userlogout' ) )
+                               // Redirects to some special pages are not permitted
+                               if( $title instanceof Title 
+                                               && !$title->isSpecial( 'Userlogout' )
+                                               && !$title->isSpecial( 'Filepath' ) ) 
+                               {
                                        return $title;
+                               }
                        }
                }
                return null;