SECURITY: Don't allow loading unprotected JS files

[lhc/web/wiklou.git] / RELEASE-NOTES-1.31

diff --git a/RELEASE-NOTES-1.31 b/RELEASE-NOTES-1.31
index 3e7f5d1..6421a04 100644 (file)
--- a/RELEASE-NOTES-1.31
+++ b/RELEASE-NOTES-1.31
@@ -18,6 +18,8 @@ THIS IS NOT A RELEASE YET
 * (T207541) Pass email address to mail().
 * (T207603) User JS may no longer be loaded with mime type text/javascript if
   there is no account associated with the username.
+* (T113042) Do not allow loading pages raw with a text/javascript MIME type if
+  non-admins can edit the page.
 
 == MediaWiki 1.31.1 ==