Log violations of load.php's no-session constraint
authorBrad Jorsch <bjorsch@wikimedia.org>
Thu, 25 Feb 2016 21:54:06 +0000 (16:54 -0500)
committerAnomie <bjorsch@wikimedia.org>
Mon, 7 Mar 2016 20:25:43 +0000 (20:25 +0000)
Bug: T127233
Change-Id: I3d9538b36f707ed69c2d163ccf1f807af4b02fc0

load.php

index c6452fb..d30a348 100644 (file)
--- a/load.php
+++ b/load.php
 
 use MediaWiki\Logger\LoggerFactory;
 
+// This endpoint is supposed to be independent of request cookies and other
+// details of the session. Log warnings for violations of the no-session
+// constraint.
+define( 'MW_NO_SESSION', 'warn' );
+
 require __DIR__ . '/includes/WebStart.php';
 
 // URL safety checks