-* (bug 23171) Improve IE6 version check to avoid false positives.
-* (bug 23176) Fixed upload warning override feature "upload new version",
- broken in 1.16 beta 1.
-* Fixed regression in unwatch links sent out in notification emails. When the
- mailing job was deferred via the job queue, the title was incorrect.
-* (bug 23534) Fixed SQL query error in API list=allusers.
-* Fixed a bug in uploads for non-JavaScript clients. An empty string was used
- as the default destination filename, instead of the source filename as
- expected.
-* (bug 23371) Fixed CSRF vulnerability in "e-mail me my password", "create
- account" and "create by e-mail" features of [[Special:Userlogin]]
-* (bug 23687) Fixed XSS vulnerability affecting IE clients only, due to a CSS
- validation issue.
-* Fixed a DoS vulnerability in ImageMagick image scaling. ImageMagick
- expanded wildcard characters "?" and "*" in image filenames, potentially
- causing large numbers of images to be scaled in response to a single request.
- The fix for this involves breaking the scaling of such image filenames until
- ImageMagick 6.6.1-5 or later is deployed, see bug 23361 for more details.
-* (bug 23608) Fixed invalid HTML in diff pages.
-
-=== Changes since 1.16 beta 1 ===
-
-* Fixed errors in maintenance/patchSql.php
-* (bug 19627) Fix regression from r57867 where HTMLForm would output
- <element classes="foo bar"> rather than <element class="foo bar">
-* Fixed broken "-r" option to maintenance/lag.php
-* (bug 23076) Fixed login CSRF vulnerability. Logins now require a token to
- be submitted along with the user name and password.
-
-=== Configuration changes in 1.16 ===
-
-* (bug 18222) $wgMinimalPasswordLength default is now 1
-* $wgSessionHandler can be used to configure session.save_handler
-* $wgLocalFileRepo/$wgForeignFileRepos now have a 'fileMode' parameter to
- be used when uploading/moving files
-* (bug 18761) $wgHiddenPrefs is a new array for specifying preferences not
- to be shown to users
-* $wgAllowRealName and $wgAllowUserSkin were deprecated in favor of
- $wgHiddenPrefs[] = 'realname', but the former are still retained
- for backwards-compatibility
-* (bug 9257) $wgRCMaxAge now defaults to three months
-* $wgDevelopmentWarnings can be set to true to show warnings about deprecated
- functions and other potential errors when developing.
-* Subpages are now enabled in the MediaWiki namespace by default. This is
- mainly a cosmetic change, and does not in any way affect the MessageCache,
- which was already effectively treating the namespace as if it had subpages.
-* Oracle: maintenance/ora/user.sql script for creating DB user on oracle with
- appropriate privileges. Creating this user with web-install page requires
- oci8.privileged_connect set to On in php.ini.
-* Removed UserrightsChangeableGroups hook introduced in 1.14
-* Added $wgCacheDirectory, to replace $wgFileCacheDirectory,
- $wgLocalMessageCache, and any other local caches which need a place to put
- files.
-* $wgFileCacheDirectory is no longer set to anything by default, and so either
- needs to be set explicitly, or $wgCacheDirectory needs to be set instead.
-* $wgLocalMessageCache has been removed. Instead, set $wgUseLocalMessageCache
- to true
-* Removed $wgEnableSerializedMessages and $wgCheckSerialized. Similar
- functionality is now available via $wgLocalisationCacheConf.
-* $wgMessageCache->addMessages() is deprecated. Messages added via this
- interface will not appear in Special:AllMessages.
-* $wgRegisterInternalExternals can be used to record external links pointing
- to same server
-* (bug 19907) $wgCrossSiteAJAXdomains and $wgCrossSiteAJAXdomainExceptions added
- to control which external domains may access the API via cross-site AJAX.
-* $wgMaintenanceScripts for extensions to add their scripts to the default list
-* $wgMemoryLimit has been added, default value '50M'
-* $wgExtraRandompageSQL is deprecated, the SpecialRandomGetRandomTitle hook
- should be used instead
-* (bug 20489) $wgIllegalFileChars added to override the default list of illegal
- characters in file names.
-* (bug 19646) $wgImgAuthDetails added to display reason access to uploaded file
- was denied to users(img_auth only)
-* (bug 19646) $wgImgAuthPublicTest added to test to see if img_auth set up
- correctly (img_auth only)
-* $wgUploadMaintenance added to disable file deletions and restorations during
- maintenance
-* $wgCapitalLinkOverrides added to configure per-namespace capitalization
-* (bug 21172) $wgSorbsUrl can now be an array with multiple DNSBL and renamed
- to $wgDnsBlacklistUrls (backward compatibility kept)
-* $wgEnableHtmlDiff has been removed
-* (bug 3340) $wgBlockCIDRLimit added (default: 16) to configure the low end of
- CIDR ranges for blocking
-* $wgUseInstantCommons added for quick and easy enabling of Commons as a remote
- file repository
-* $wgDBAhandler added to choose a DBA handler when using CACHE_DBA
-* $wgPreviewOnOpenNamespaces for extensions that create namespaces that behave
- similarly to the category namespace.
-* $wgEnableSorbs renamed to $wgDnsBlacklistUrls ($wgEnableSorbs kept for
- backward compatibility)
-* $wgUploadNavigationUrl now also affects images inline images that do not
- exist. In that case the URL will get (?|&)wpDestFile=<filename> appended to
- it as appropriate.
-* If $wgLocaltimezone is null, use the server's timezone as the default for
- signatures. This was always the behaviour documented in DefaultSettings.php
- but has not been the actual behaviour for some time: instead, UTC was used
- by default.
-* Added $wgExtensionAssetsPath, to decouple assets serving from $wgScriptPath.
- If not specified it will default to $wgScriptPath/extensions
-* Added $wgCountTotalSearchHits to make search UI display total number of hits
- with some search engines.
-* Added $wgAdvertisedFeedTypes to decide what feed types (RSS, Atom, both, or
- neither) MediaWiki advertises. Default is array( 'atom' ), so RSS is no
- longer advertised by default (but it still works).
-* Added $wgMemCachedTimeout, controls how long to wait for data from the
- memcached servers.
-* New configuration variables $wgDebugTimestamps and $wgDebugPrintHttpHeaders
- for controlling debug output.
-* New $wgBlockDisablesLogin when set to true disallows blocked users from
- logging in.
-* (bug 8790) Metadata edition ($wgUseMetadataEdit) has been moved to a separate
- extension "MetadataEdit".
-
-=== New features in 1.16 ===
-
-* A new skin called Vector was added
-* Add CSS defintion of the 'wikitable' class to shared.css
-* (bug 17163) Added MediaWiki:Talkpageheader which will be displayed when
- viewing talk pages
-* Superfluous border="0" removed from images
-* Added new hook 'MessageCacheReplace' into MessageCache.php. For instance
- to allow extensions to update caches in similar way as MediaWiki invalidates
- a cached MonoBook sidebar
-* Special:AllPages: Move hardcoded styles from code to CSS
-* (bug 18529) New hook: SoftwareInfo for adding information about the software
- to Special:Version
-* Added $wgExtPGAlteredFields to allow extensions to easily alter the data
- type of columns when using the Postgres backend.
-* (bug 16950) Show move log when viewing/creating a deleted page
-* (bug 18242) Show the Subversion revision number per extensions in
- Special:Version
-* (bug 18420) Missing file revisions are handled gracefully now
-* (bug 9219) Auth plugins can control editing RealName/Email/Nick preferences
-* (bug 18466) Add note or warning when overruling a move (semi-)protection
-* (bug 18342) insertTags works in edit summary box
-* (bug 18411) The upload form also checks post_max_size
-* Watchlist now has a specialized <div> tag that contains a unique class for
- each page
-* Added Minguo calendar support for the Taiwan Chinese language
-* Database: unionQueries function to be used for UNION sql construction, so
- it can be overloaded on DB abstraction level for DB specific functionality
-* (bug 18849) Implement Japanese and North Korean calendars
-* (bug 5755) Introduce {{CURRENTMONTH1}} and {{LOCALMONTH1}} to display the
- month number without the leading zero
-* (bug 13456) categoriespagetext supports PLURAL
-* (bug 18860) Blocks of IPs affecting registered users can now block email
-* (bug 17093) Date and time are separate parameters in Special:BlockList
-* (bug 11484) Added ISO speed rating to default collapsed EXIF metadata view
-* (bug 14866) Messages 'recentchangeslinked-toolbox' and
- 'recentchangeslinked-toolbox' were added to allow more fine grained
- customisation of the user interface
-* DISPLAYTITLE now accepts a limited amount of wiki markup (the single-quote
- items)
-* Special:Search now could search terms in all variant-forms. ONLY apply on
- wikis enabled LanguageConverter.
-* Add autopromote condition APCOND_BLOCKED to autopromote blocked users to
- various user groups.
-* Add $wgRevokePermissions as a means of restricting a group's rights. The
- syntax is identical to $wgGroupPermissions, but users in these groups will
- have these rights stripped from them.
-* Added a PHP port of CDB (constant database), for improved local caching when
- the DBA extension is not available.
-* Introduced a new system for localisation caching. The system is based around
- fast fetches of individual messages, minimising memory overhead and startup
- time in the typical case. The database backend will be used by default, but
- set $wgCacheDirectory to get a faster CDB-based implementation.
-* Expanded the number of variables which can be set in the extension messages
- files.
-* Added a feature to allow per-article process pool size control for the parsing
- task, to limit resource usage when the cache for a heavily-viewed article is
- invalidated. Requires an external daemon.
-* (bug 19576) Moved the id attribues from the anchors accompanying section
- headers to the <span class="mw-headline"> elements within the section headers,
- removing the redundant anchor elements.
-* Parser::setFunctionTagHook now can be used to add a new tag which is parsed at
- preprocesor level.
-* Added $wgShowArchiveThumbnails, allowing sysadmins to disable thumbnail
- display for old versions of images.
-* In watchlists and Special:RecentChanges, the difference in page size now
- appears in dark green if bytes were added and dark red if bytes were removed.
-* Added FSRepo configuration properties thumbUrl and thumbDir, to allow the
- thumbnails to be stored in a separate location to the source images.
-* If config/ directory is not executable, the command to make it executable
- now asks the user to cd to the correct directory
-* Add experimental new external authentication framework, ExternalAuth
-* (bug 18768) Remove AdminSettings requirements. Maintenance environment
- will still load it if it exists, but it's not required for anything
-* (bug 19900) The "listgrouprights-key" message is now wrapped in a div with
- class "mw-listgrouprights-key"
-* (bug 471) Allow RSS feeds for watchlist, using an opt-in security token
-* (bug 10812) Interwiki links can have names and descriptions, fetched from
- message 'interwiki-desc-PREFIX', not really used anywhere yet though
-* (bug 9691) Add type (signup or login) parameter to
- AuthPlugin::ModifyUITemplate()
-* (bug 14454) "Member of group(s)" in Special:Preferences causes language
- difficulties
-* (bug 16697) Unicode combining characters are difficult to edit in some
- browsers
-* Parser test supports uploading results to remote CodeReview instance
-* (bug 20013) Added CSS class "mw-version-ext-version" is wrapped on the
- extension version in Special:Version
-* (bug 20014) Added CSS class "mw-listgrouprights-right-name" is wrapped on the
- right name in Special:ListGroupRights
-* (bug 12920) New CoreParserFunction {{nse:...}} as an url-friendly equivalent
- to {{ns:...}}
-* (bug 16322) Allow maintenance scripts to accept DB user/pass over input or
- params
-* (bug 18566) Maintenance script to un/protect pages
-* (bug 671) The HTML <abbr> tag is now permitted.
-* RecentChanges now has a legend to explain what the Nmb! flags mean, and the
- flags have tooltips.
-* (bug 15209) New hook BeforeInitialize called after everything has been setup
- but before Mediawiki::performRequestForTitle()
-* wgMainPageTitle variable now available to JavaScript code to identify the main
- page link, so it doesn't have to be extracted from the link URLs.
-* (bug 16836) Display preview of signature in user preferences and describe its
- use
-* The default output format is now HTML 5 instead of XHTML 1.0 Transitional.
- This can be disabled by setting $wgHtml5 = false;. Specific features enabled
- if HTML 5 is used:
-** Some extra inputs will be autofocused, in supporting browsers.
-** The summary attribute has been removed from tables of contents. summary is
- obsolete in HTML 5 and wasn't useful here anyway.
-** Unnecessary type="" attribute removed for CSS and JS.
-** If $wgWellFormedXml is set to false, some bytes will be shaved off of HTML
- output by omitting some things like quotation marks where HTML 5 allows.
-** (bug 16921) maxlength enabled for page move comments
-* The description message in $wgExtensionCredits can be an array with parameters
-* New hook SpecialRandomGetRandomTitle allows extensions to modify the selection
- criteria used by Special:Random and subclasses, or substitute a custom result,
- deprecating the $wgExtraRandompageSQL config variable
-* (bug 20318) Distinct CSS classes for ISBN/RFC/PMID special links added
-* (bug 20404) Custom fields in the user creation form template can now have
- detail labels in prefsectiontip divs.
-* MakeSysop and MakeBot are now aliases for Special:UserRights
-* IndexPager->mLimitsShown can now be an associative array of limit => text-to-
- display-in-limit-form.
-* (bug 18880) LogEventsList::showLogExtract() can now take a string-by-reference
- and add its HTML to it, rather than having to go straight to $wgOut.
-* Added $wgShowDBErrorBacktrace, to allow users to easily gather backtraces for
- database connection and query errors.
-* Show change block / unblock link on Special:Contributions if user is blocked
-* Display note on Special:Contributions if the user is blocked, and provide an
- excerpt from the block log.
-* (bug 19646) New hook: ImgAuthBeforeStream for tests and functionality before
- file is streamed to user, but only when using img_auth
-* Note on non-existing user and user talk pages if user does not exist
-* New hook ShowMissingArticle so extensions can modify the output for
- non-existent pages.
-* Admins could disable some variants using $wgDisabledVariants now. ONLY apply
- on wikis enabled LanguageConverter.
-* (bug 16310) Credits page now lists IP addresses rather than saying the number
- of anonymous users that edited the page
-* New permission 'sendemail' added. Default right for all registered users. Can
- for example be used to prevent new accounts from sending spam.
-* (bug 16979) Tracking categories for __INDEX__ and __NOINDEX__
-* Two new hooks, ConfirmEmailComplete and InvalidateEmailComplete, which are
- called after a user's email has been successfully confirmed or invalidated.
-* (bug 19741) Moved the XCF files out of the main MediaWiki distribution, for
- a smaller subversion checkout.
-* (bug 13750) First letter capitalization can now be a per-namespace setting
-* (bug 21073) "User does not exist" message no longer displayed on sub-sub-pages
- of existing users
-* (bug 21095) Tracking categories produced by the parser (expensive parser
- function limit exceeded, __NOINDEX__ tracking, etc) can now be disabled by
- setting the system message ([[MediaWiki:expensive-parserfunction-category]]
- etc) to "-".
-* Added maintenance script sqlite.php for SQLite-specific maintenance tasks.
-* Rewrote Special:Upload to allow easier extension.
-* Upload errors that can be solved by changing the filename now do not require
- reuploading.
-* Added $wgRateLimitsExcludedIPs, to allow specific IPs to be whitelisted from
- rate limits.
-* (bug 21222) When $wgUseTeX is not enabled, <math> is no longer registered with
- the parser so extensions are free to implement their own <math> tag
-* (bug 21047) Wrap 'cannotdelete' into a div with the generic 'error' class and
- an own 'mw-error-cannotdelete' class
-* New hook AbortNewAccountAuto, called before account creation from AuthPlugin-
- or ExtUser-driven requests.
-* (bug 3480) The warning saying that the page has a history when deleting it now
- contains the number of revisions in the history
-* $wgStylePath and $wgLogo are now set in the default LocalSettings.php file.
-* (bug 20186) Allow filtering history for revision deletion.
-* New hook OtherBlockLogLink, called in Special:IPBlockList and Special:Block
- to show links to block logs of other blocking extensions, i.e. GlobalBlocking
-* Added search capabilities to SQLite backend
-* rebuildtextindex.php maintenance script now supports databases other than
- MySQL
-* upgrade1_5.php now requires to be run --update option to prevent confusion
-* (bug 17662) Customizable default preload/editintro for new sections in the
- respective addsection-preload and addsection-editintro messages
-* Added maintenance script checkSyntax.php that checks for PHP syntax errors
- and common coding mistakes
-* Updated Unicode normalization tables
-* (bug 21604) Spellcheck attribute for editsummary
-* New wgCategories JavaScript global variable for userscripts.
-* (bug 20717) Added checkboxes to hide users with bot and/or sysop group
- membership in SpecialActiveusers
-* Allow \pagecolor and \definecolor in texvc
-* $wgTexvcBackgroundColor contains background color for texvc call
-* (bug 21574) Redirects can now have "303 See Other" HTTP status
-* EditPage refactored to allow extensions to derive new edit modes much easier.
-* (bug 21826) Subsections of Special:Version now also have anchors
-* (bug 19791) Add URL of file source as comment to thumbs (for ImageMagick)
-* (bug 21946) Sorted wikitables do not properly handle minus signs
-* (bug 18885) Red links for media files do not support shared repositories
-* Added $wgFixArabicUnicode, to convert deprecated presentation forms in
- Arabic text to their modern equivalents, and $wgFixMalayalamUnicode, to
- convert ZWJ-based chillu sequences in Malayalam text to their Unicode 5.1
- equivalents.
-* (bug 22051) Returing false in SpecialContributionsBeforeMainOutput hook now
- stops normal output
-* Send new password e-mail in users preference language
-* LanguageConverter now support nested using of manual convert syntax like
- "-{-{}-}-"
-* Upload license preview now uses the API instead of action=ajax
-* (bug 7346) Add <guid> to RSS to avoid duplicates
-* (bug 19996) Added new hooks for Special:Search, which allow to further
- restrict/expand it.
-* (bug 21936) When a revision has been patrolled, there's now a link back to the
- article
-* (bug 22315) SpecialRecentChangesQuery hook now pass $query_options and checks
- the return value
-* Separate unit test suites under t/ and tests/ were merged and moved to
- maintenance/tests/.
-* importImages.php maintenance script can now use the original uploader and
-comment from another wiki.
-* Support for Turck MMCache was removed
-* (bug 14592) Warn users when they try to move their user page that their
- account will not be renamed
-* Show block log on non-existing user (talk) pages of currently blocked users
-
-=== Bug fixes in 1.16 ===
-
-* (bug 18031) Make namespace selector on Special:Export remember the previous
- selection
-* The svn-version version numbers on Special:Version have been removed
-* (bug 17374) Special:Export no longer exports two copies of the same page
-* (bug 18190) Proper parsing in MediaWiki:Sharedupload message
-* (bug 17617) HTML cleanup for ImagePage
-* (bug 17964) namespaceDupes.php no longer fails on an empty interwiki table
-* Improved error handling for image moving
-* (bug 17974) On Special:SpecialPages, restricted special pages are now marked
- with <strong> tags, helps with text-based browsers
-* (bug 18259) Special:DeletedContributions now also uses
- MediaWiki:Sp-contributions-logs for the link to Special:Log
-* Don't add empty title="" attributes to links to anchors on the current page
-* (bug 18291) rebuildrecentchanges.php failed to add deletion log entries
-* (bug 18304) rebuildrecentchanges.php got size changes wrong
-* (bug 18170) Fixed a PHP warning in Parser::preSaveTransform() in PHP 5.3
-* (bug 18289) Database connection error page now returns correct HTML
-* "successbox", "errorbox" and related CSS classes are now available in all
- skins
-* (bug 18316) Removed superfluous name="fulltext" from Special:Search
-* (bug 18331) MediaWiki:Undelete-revision can now have wikitext
-* The "noautoblock" flag is no longer displayed in the block log when blocking
- an IP address
-* (bug 18009) $wgHooks and $wgExtensionFunctions now support closures
-* (bug 17948) Maintenance scripts now exit(0) or exit(1) as appropriate
-* (bug 18377) Time in Enhanced ChangesList lacking localisation
-* (bug 12998) Allow <sup>, <sub>, etc. in DISPLAYTITLE
-* (bug 1553) Lowercase navigation headings in German
-* (bug 7830) Pending transactions failed to commit on loginToUse() error
-* (bug 11613) session.save_handler being over-ridden
-* (bug 11381) session.save_handler being set twice (causes error)
-* (bug 17835) ForeignAPIRepo throwing error on first page load for file
-* (bug 18115) ForeignAPIRepo cache isn't working
-* Fixed a bug caused by LanguageConverter.php, which brings an abnormal '}-'
- after some parsed math syntax.
-* (bug 18441) rebuildrecentchanges.inc no longer ignores $wgLogRestrictions
-* (bug 18317) Bolded selections in 1 | 3 | etc days on RecentChanges now use
- <strong> instead of hardcoded styles
-* (bug 18449) Fixed items number per column on category pages when the total is
- divisible by 3
-* (bug 18121) maintenance/deleteArchivedRevisions.php no longer deletes
- revisions when --delete is not passed
-* (bug 13172) GPS coordinates in image Exif data are now actually displayed
-* Overhaul of preferences system, includes the following bug fixes:
-** (bug 5363) Changes to default preferences now impact registered users.
-** (bug 14806) Hook to enable putting preferences in existing tabs.
-** (bug 17191) Registration date now listed on preferences page.
-** The user_properties table (now used for storing preferences) has been added
- to $wgSharedTables.
-** Note that this change will break some extensions which have not been adapted
- for it.
-* (bug 17020) Adding fallback encodings for Traditional and Simplified Chinese
- languages while the the text is typed as URLs.
-* (bug 17614) Prev / Next links are not shown if all results are shown
-* (bug 18207) Strange spacing before [[irc:...]] links
-* Removed float from the user login form in RTL interface - caused display
- problems in FF2
-* (bug 15008) Redirect images are now subject to Bad image list rules
-* (bug 6802) profileinfo.php now also work on other database servers than MySQL
-* (bug 16925) Diffs no longer fail when $wgExternalDiffEngine is set to
- 'wikidiff' or 'wikidiff2' but extension is not installed
-* (bug 18326) Chmod errors in file repos have been hidden
-* (bug 18718) Comma after a } create a error in IE
-* (bug 18716) Removed redundant class in Modern skin CSS for category links and
- tweaked spacing.
-* (bug 18656) Use proper directory separators in wfMkdirParents()
-* (bug 18549) Make Special:Blockip respect $wgEnableUserEmail and
- $wgSysopEmailBans
-* (bug 16912) Tooltips on images with link= disappear
-* (bug 18389) Localise numbers in EXIF data
-* (bug 18522) Wrap MediaWiki:Protect-cascadeon in a div for identification
-* (bug 18438) Tweak HTML for preview bar for consistency and accessibility
-* (bug 18432) Updated documentation for dumpBackup.php
-* Fix array logic in Sanitizer::removeHTMLtags so that it doesn't strip good
- tags that were redundantly defined.
-* (bug 14118) SpecialPage::getTitleFor does not return a localised name
-* (bug 18698) Renaming non entry point maintenance scripts from .inc.php to
- .inc
-* Deprecated methods Title::getInterwikiLink, Title::userCanCreate(),
- Title::userCanEdit() and Title::userCanMove() have been removed
-* Only show upload links on file description if $wgEnableUploads = true
- and user can upload
-* Don't say "You need to log in to upload/move", because it's possible that
- uploading/moving is disabled for registered users as well (e.g. only sysops)
-* (bug 18943) Handle invalid titles gracefully at Special:Mostlinked
-* (bug 8873) Enable variant conversion in text on 'alt' and 'title' attributes
-* (bug 10837) Introducing the StubUserVariant class to determine the variant
- variable instead of using this to overrules the user language preference.
-* (bug 19014) If user had deletedhistory right, but not undeleted right, then
- show "view" instead of "view/restore" on logs.
-* (bug 19017) TOC level calculation error in an odd case
-* (bug 18999) CSS update for RTL interwiki links
-* (bug 18925) history.js removes class names of list elements on initialization
-* Multiple whitespace in TOC anchors is now stripped, for consistency with the
- link from the edit comment
-* (bug 19112) Preferences now respects $wgUseExternalEditor
-* (bug 18173) MediaWiki now fails when unable to determine a client IP
-* (bug 19170) Special:Version should follow the content language direction
-* (bug 19160) maintenance/purgeOldText.inc is now compatible with PostgreSQL
-* Fixed performance regression in "bad image list" feature
-* Show user preference 'Use live preview' if $wgLivePreview is enabled only
-* (bug 17014) Blocked users can no longer use Special:UserRights unless they
- can add/remove *all* groups (have 'userrights' permission).
-* (bug 19294) Always show Sp-contributions-footer(-anon)
-* Attempts to restrict reading of pages while anonymous viewing is allowed
- via extensions not using the userCan hook and via $wgRevokePermissions now