Javier Bezos wrote:
http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.ht...
Which was also cross-posted to this list and wikitech-l.
Thank you, Chad, but what I actually wanted was an explanation of the bug. If the problem are external images, I presume a link has to be given somehow, but in our wiki only wiki-like links (ie, [http://...]) are allowed, so I was interested in the details. I presume the fix is this one:
http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=63424
Javier
Yes. The problem is not the external images feature, but that you could embed an image inside CSS with mediawiki not noticing that it was an external link. Per the advisory, all installs since 1.5 are affected.