(version) 1.1.0.3 - security release for legacy MediaWiki 1.23 (obsol…

…ete LTS) Note: TODO was removed as obsolete (actual TODO is on the master branch).
edwardspec · Apr 23, 2018 · 6648ccd · 6648ccd
1 parent 2dd3d02
commit 6648ccd
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 25 deletions.
diff --git a/ChangeLog b/ChangeLog
@@ -1,5 +1,16 @@
 List of changes between releases of Extension:Moderation.
 
+== Moderation 1.1.0.3 ==
+
+Security release for legacy MediaWiki 1.23 (obsolete LTS).
+Unlike Moderation 1.2.0, this release has no changes except those needed for security.
+If you are at MediaWiki 1.27+, please use Moderation 1.2.0.
+
+Security updates:
+* Restricted filerevert API (revert image to older version) to automoderated
+users, because this action can't be intercepted by Moderation.
+* Fixed improper escaping of user-provided mod_comment on Special:Moderation.
+
 == Moderation 1.1.0 ==
 
 Features:

diff --git a/Moderation.php b/Moderation.php
@@ -36,7 +36,7 @@
 	'url' => 'https://www.mediawiki.org/wiki/Extension:Moderation',
 	'descriptionmsg' => 'moderation-desc',
 	'license-name' => 'GPL-3.0+',
-	'version' => '1.1.0.1'
+	'version' => '1.1.0.3'
 );
 
 $wgMessagesDirs['Moderation'] = array(

diff --git a/TODO b/TODO
diff --git a/extension.json b/extension.json
@@ -1,6 +1,6 @@
 {
 	"name": "Moderation",
-	"version": "1.1.0.2",
+	"version": "1.1.0.3",
 	"author": "Edward Chernenko",
 	"url": "https://www.mediawiki.org/wiki/Extension:Moderation",
 	"descriptionmsg": "moderation-desc",