-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
See http://ha.ckers.org/blog/20070220/mediawiki-192-utf-7-xss/ for details. I'm sure we get these all the time, but since RSnake picked it up it probably will get a bit more publicity than normal. Has it been fixed on the trunk yet?