[Mediawiki-l] [Wikitech-l] MediaWiki security release 1.16.4

Daniel Kinzler daniel at brightbyte.de
Thu Apr 14 08:02:58 UTC 2011


On 14.04.2011 09:47, Tim Starling wrote:
> We missed the fact that there can be more than one question mark in a
> URL. In certain circumstances, IE 6 will use a file extension
> immediately before a question mark character, regardless of how many
> question marks precede it. For example, with the URL:
> 
> http://example.com/a?b?c.html?d?e
> 
> IE 6 will see the file extension as ".html".

Wow, seriously? IE6 should be taken out the back and shot...

-- daniel



More information about the MediaWiki-l mailing list