On Nov 25, 2004, at 12:25 PM, Randy Becker wrote:
Yup. This was it. I was running 1.3.2 ... in the process of upgrading, but having problems. Now the wikified stylesheet isn't being read due to the raw output redirecting too much (commenting out the new IE code fixes that) and also the page doesn't reference index.php, so the correct raw text isn't being generated. I'm still looking into it...
Most likely you need to set $wgScript to "/index.php" instead of "".
Sorry, but Microsoft has as usual spoiled the party for everyone: if you go to a URL like this in IE: http://foobar/bizbax.html?action=raw and its content _looks kind of like_ HTML it will interpret the page as HTML despite the content-type header specifically saying otherwise. IE thus happily will execute all kinds of JavaScript, load unsafe ActiveX controls, etc with the permissions of a genuine HTML page at the (possibly trusted) web site.
A malicious person may be able to trick your users into visiting this link, whereupon JavaScript can steal their login cookies or an exploit of an unpatched IE bug can be used install spywhere or whatever.
This is not desirable, so now we're a little pickier about action=raw; the URL needs to be using the canonical script URL, which will generally have an "extension" of .php and IE won't be quite so quick to mis-detect it. This does mean that $wgScript needs to be set to point at a real script URL, or you end up with some trouble.
-- brion vibber (brion @ pobox.com)