On 01/20/2017 05:02 PM, Matthew Flaschen wrote:
There is a security fix to ensure that EnableFlow is always properly attributed.
Backports have been merged for 1.26, 1.27, and 1.28.
However, please note that MW 1.26 is end-of-life, and we are not supporting either MW 1.26 or Flow 1.26.
Matt Flaschen
mediawiki-l@lists.wikimedia.org