On Nov 25, 2004, at 12:25 PM, Randy Becker wrote:
Yup. This was it. I was running 1.3.2 ... in the
process of upgrading,
but having problems. Now the wikified stylesheet isn't being read due
to the raw output redirecting too much (commenting out the new IE code
fixes that) and also the page doesn't reference index.php, so the
correct raw text isn't being generated. I'm still looking into it...
Most likely you need to set $wgScript to "/index.php" instead of "".
Sorry, but Microsoft has as usual spoiled the party for everyone: if
you go to a URL like this in IE:
http://foobar/bizbax.html?action=raw
and its content _looks kind of like_ HTML it will interpret the page as
HTML despite the content-type header specifically saying otherwise. IE
thus happily will execute all kinds of JavaScript, load unsafe ActiveX
controls, etc with the permissions of a genuine HTML page at the
(possibly trusted) web site.
A malicious person may be able to trick your users into visiting this
link, whereupon JavaScript can steal their login cookies or an exploit
of an unpatched IE bug can be used install spywhere or whatever.
This is not desirable, so now we're a little pickier about action=raw;
the URL needs to be using the canonical script URL, which will
generally have an "extension" of .php and IE won't be quite so quick to
mis-detect it. This does mean that $wgScript needs to be set to point
at a real script URL, or you end up with some trouble.
-- brion vibber (brion @
pobox.com)