K 10 svn:author V 5 remko K 8 svn:date V 27 2007-09-21T13:14:29.000000Z K 7 svn:log V 296 Document mediawiki -- cross site scripting vulnerability, our port versions had not been updated yet, 1.8.x is not vulnerable by default unless you are using the $wgEnableAPI = true; statement, in that case please set it to $wgEnableAPI = false; (where possible ofcourse, else upgrade to 1.8.5). END