Reedy <reedy@wikimedia.org> committed rMWe73a2d8c5179: SECURITY: Handle -{}- syntax in attributes safely (authored by Brian Wolff <bawolff+wn@gmail.com>).

Chad Horohoe <chadh@wikimedia.org> committed rMW5fcd8388ac28: Creating new WMF 1.31.0-wmf.8 branch.

Chad Horohoe <chadh@wikimedia.org> committed rMW00cce42f56d7: Creating new WMF 1.31.0-wmf.7 branch.

Reedy <reedy@wikimedia.org> committed rMW8e49741a46cd: SECURITY: Make anchor for headlines escape > and < (authored by Max Semenik <maxsem.wiki@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWa18b5219a22e: SECURITY: Do not reveal if user exists during login failure (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW1d51f68b4fe6: SECURITY: Create a .htaccess in /vendor after composer runs (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMWb5ee39083bc6: SECURITY: update.php: Remove eval-stdin.php if necessary (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMW1f8f98c63138: SECURITY: Ensure Message::rawParams can't lead to XSS (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWb44e5d586270: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW89d7f1d45700: SECURITY: Escape internal error message (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW82f53ce93ab8: Suggest running composer (install|update) with --no-dev.

Reedy <reedy@wikimedia.org> committed rMW8f290674fbba: SECURITY: Add throttling for BotPasswords authentication attempts (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW9ccd91630fae: SECURITY: API: Avoid some silliness with browser-guessed filenames (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMWf2dbb367ad5f: Quote $default in PostgresUpdater::setDefault.

Krinkle <krinklemail@gmail.com> committed rMW63288a8c0295: importDump.php: Declare uploadCount property (authored by Mark A. Hershberger <mah@nichework.com>).

Reedy <reedy@wikimedia.org> committed rMW0c67c84000c9: Add RELEASE-NOTES for 1.28 backports.

Reedy <reedy@wikimedia.org> committed rMW9e291ee98609: Remove use of implicitGroupBy() in ActiveUsersPager (authored by Aaron Schulz <aschulz@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW597336a4b40a: Merge "Fix/hack ErrorPageError to work from non-UI contexts" into REL1_28 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW99c622b4bec4: Updated dev dependancy phpunit/phpunit from v4.8.24 to v4.8.36.

Robert Vogel <vogel@hallowelt.biz> committed rMW8ed5fd04f8c4: Allow namespaces defined in extension.json to be overwritten locally. (authored by daniel <daniel.kinzler@wikimedia.de>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW01d41dffd836: Merge "Allow namespaces defined in extension.json to be overwritten locally."… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW614dcd1ba0da: Add support for PHP7 random_bytes in favor of mcrypt_create_iv (authored by Derk-Jan Hartman <hartman.wiki@gmail.com>).

Brian Wolff <bawolff+wn@gmail.com> committed rMW03f4788e3065: Allow SVGs using an older proposed recommendation DTD (authored by Matthias Mullie <git@mullie.eu>).

Reedy <reedy@wikimedia.org> committed rMW6775d99ad27d: CryptRand: only use random_bytes on php 7 and HHVM (authored by Derk-Jan Hartman <hartman.wiki@gmail.com>).

Mark A. Hershberger <mah@nichework.com> committed rMW8a92c740e7b2: Fix/hack ErrorPageError to work from non-UI contexts (authored by Chad Horohoe <chadh@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW33726881e51e: SECURITY: Ensure Message::rawParams can't lead to XSS (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW1ead56f2757e: SECURITY: Handle -{}- syntax in attributes safely (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW15075cfcd06c: SECURITY: update.php: Remove eval-stdin.php if necessary (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMW7c9452160e40: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW5f3e48046cd2: SECURITY: Fix rebase error in 4d38a489 (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMWc61a000a4280: SECURITY: Create a .htaccess in /vendor after composer runs (authored by Kunal Mehta <legoktm@member.fsf.org>).

Reedy <reedy@wikimedia.org> committed rMW1713ddeff12b: SECURITY: Escape internal error message (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW00316dbb8173: SECURITY: API: Avoid some silliness with browser-guessed filenames (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Reedy <reedy@wikimedia.org> committed rMW00eb3f3d2d3a: RELEASE-NOTES-1.30: Add upgraded, added libraries based on git history (authored by James D. Forrester <jforrester@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW6ae820548384: Remove htmlspecialchars for Html::hidden (authored by Fomafix <fomafix@googlemail.com>).

Reedy <reedy@wikimedia.org> committed rMW090c3b3697fd: SECURITY: Do not reveal if user exists during login failure (authored by Brian Wolff <bawolff+wn@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMW7b0f209ec5c9: SECURITY: Add throttling for BotPasswords authentication attempts (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW5636c3602ce8: PostgreSQL: Use correct PK name so patch-site_stats-pk.sql isn't run when not… (authored by Brad Jorsch <bjorsch@wikimedia.org>).

MaxSem <maxsem.wiki@gmail.com> committed rMWa4e747d87fa7: Escape single quotes in attributes (authored by Max Semenik <maxsem.wiki@gmail.com>).

Reedy <reedy@wikimedia.org> committed rMWd6ce87ca2c89: Suggest running composer (install|update) with --no-dev.

Reedy <reedy@wikimedia.org> committed rMW316ff416f2a9: Updated dev dependancy phpunit/phpunit from v4.8.35 to v4.8.36.

Legoktm <legoktm@member.fsf.org> committed rMWbe799cadda2f: DifferenceEngine: Fix wikidiff2 version check (authored by Kunal Mehta <legoktm@member.fsf.org>).

EddieGP <wikimedia.org@eddie-sh.de> committed rMWd83820efd983: Add primary keys to site_stats (authored by Eddie Greiner-Petter <git@eddie-sh.de>).

MaxSem <maxsem.wiki@gmail.com> committed rMWf302d81e711e: Removed Toki Pona localization files (authored by zoranzoki21 <zorandori4444@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW977e946cd85f: Merge "Add primary keys to site_stats" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMW5c2b6bb3e2a4: resources: Deprecate the 'jquery.badge' module (authored by James D. Forrester <jforrester@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW8218c03c5480: Merge "Removed Toki Pona localization files" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWf686ca53c940: Merge "LocalFile: Fix copy-paste error" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWd5720a4664d2: Fix case of SpecialRecentChanges class (authored by Umherirrender <umherirrender_de.wp@web.de>).

Legoktm <legoktm@member.fsf.org> committed rMW622c374f3564: LocalFile: Fix copy-paste error (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWb9073582cf3a: Check minimum database server version when running update.php (authored by Kunal Mehta <legoktm@member.fsf.org>).

Paladox <thomasmulhall410@yahoo.com> committed rMW9a86fe38bcaa: Replace /r/p/ with /r/ to fix submodules.

Gerrit Code Review <gerrit@wikimedia.org> committed rMWb33280a51c2c: Merge "Replace /r/p/ with /r/ to fix submodules" into REL1_30 (authored by Chad <chadh@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW01cf3d72b20c: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Cicalese <ccicalese@wikimedia.org> committed rMWe1e152b36bdc: Fix login button label to accept RawMessage. (authored by Cicalese <cindom@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWb5927c094733: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW710938f161e0: Merge "Fix login button label to accept RawMessage." into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW8837415116ab: Introduce Shell\CommandFactory (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWbaf8b0dccba2: Update git submodules (authored by James D. Forrester <jforrester@wikimedia.org>).

Chad Horohoe <chadh@wikimedia.org> committed rMW664178a795fa: Updating submodules to latest REL1_30.

Gerrit Code Review <gerrit@wikimedia.org> committed rMW37efe30caa45: Merge "Updating submodules to latest REL1_30" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW7a4e6e5ccbd3: Don't trigger PHP errors for unused Shell\Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW11832da3b655: Merge "Shell\Command: Better walltime fallback" into REL1_30 (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Anomie <bjorsch@wikimedia.org> committed rMWb559f73e54a3: Fix PostgreSQL patch-add-3d.sql by replacing it (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Anomie <bjorsch@wikimedia.org> committed rMWa4fa7812a9a4: Have CommentStore limit the maximum character length of comments (authored by Brad Jorsch <bjorsch@wikimedia.org>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW4e01d6cd984c: Merge "Have CommentStore limit the maximum character length of comments" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Krinkle <krinklemail@gmail.com> committed rMW76e38be330b8: Ensure only strings are passed to mysql_real_escape_string() (authored by Alexander Mashin <alex.mashin@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMWa112c1752fa7: Shell\Command: Better walltime fallback (authored by Max Semenik <maxsem.wiki@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW246b80610a9e: Get rid of $IP in Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW5af7d712ad14: Inject dependencies into Shell\Command (authored by Max Semenik <maxsem.wiki@gmail.com>).

Umherirrender <umherirrender_de.wp@web.de> committed rMW0f940a7672bf: Don't attempt to copy to ip_changes in PageArchive class. (authored by MusikAnimal <musikanimal@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW0601cbaca81e: Merge "ContribsPager: Check if target is an IP range outside foreach loop" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW5569287350c7: RCFilters: Avoid adding raw filter and group objects to js vars (authored by Stephane Bisson <sbisson@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWe8c4e7f23227: Clean up wiki ID and DB domain ID handling (authored by Aaron Schulz <aschulz@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMWd498a9940ec7: WikiPage: Hard deprecate second arg of prepareContentForEdit() as an int (authored by Kunal Mehta <legoktm@member.fsf.org>).

Legoktm <legoktm@member.fsf.org> committed rMWa2c89878bb8c: ContribsPager: Check if target is an IP range outside foreach loop (authored by MusikAnimal <musikanimal@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW76d1a08422ee: RCFilters: Don't grey out results area when initializing, unless there's a… (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW66e8e3be3308: Merge "RCFilters: Don't grey out results area when initializing, unless there's… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMW1065ecc6bfa6: SpecialRecentchangeslinked: Unconditionally join on the page table (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW53f28ba4b609: Merge "SpecialRecentchangeslinked: Unconditionally join on the page table" into… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Jforrester <jforrester@wikimedia.org> committed rMWe4b0a1f3fc94: RCFilters: Redo the way spinners and ready/loading states are managed (authored by Roan Kattouw <roan.kattouw@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMWcdaa0ea04a97: Merge "RCFilters: Redo the way spinners and ready/loading states are managed"… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMWbdb47a482f80: Fix ip_changes insert counting (authored by Max Semenik <maxsem.wiki@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW010c20548284: Improve populateIpChanges.php reporting (authored by Max Semenik <maxsem.wiki@gmail.com>).

Gerrit Code Review <gerrit@wikimedia.org> committed rMW028e66dfd1a7: Merge "SpecialSearch: Fix unintended `margin` when zoom level is above 100%"… (authored by jenkins-bot <jenkins-bot@gerrit.wikimedia.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW841928b53f74: Remove duplicate release note for $wgOOUIEditPage removal.

Kunal Mehta <legoktm@member.fsf.org> committed rMW3dcdea124a73: Attempt to fix populateIpChanges maintenance script (authored by MusikAnimal <musikanimal@gmail.com>).

Legoktm <legoktm@member.fsf.org> committed rMW70d7aab32dcf: SpecialSearch: Fix unintended `margin` when zoom level is above 100% (authored by Volker E <volker.e@wikimedia.org>).

Legoktm <legoktm@member.fsf.org> committed rMW7eccf0963c5b: registration: Fix typo in validator (authored by Kunal Mehta <legoktm@member.fsf.org>).

Kunal Mehta <legoktm@member.fsf.org> committed rMWb2f33d67e0c9: Yet another attempt to fix the populateIpChanges script (authored by MusikAnimal <musikanimal@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW5ca7e8e5c770: EditPage: Don't allow clients that mangle unicode to edit (authored by Max Semenik <maxsem.wiki@gmail.com>).

Kunal Mehta <legoktm@member.fsf.org> committed rMW3df1c0ceb3e0: Add release notes for EditPage changes in 1.30.

Kunal Mehta <legoktm@member.fsf.org> committed rMW92f36230781f: EditPage: Deprecate public isCssJsSubpage related member variables.

Kunal Mehta <legoktm@member.fsf.org> committed rMW7a518e922162: EditPage: Mark getSubmitButtonLabel() as @since 1.30.

Kunal Mehta <legoktm@member.fsf.org> committed rMWea461ff28aaa: EditPage: Deprecate $mArticle and $mTitle for public usage.

Kunal Mehta <legoktm@member.fsf.org> committed rMW2383fd13225a: EditPage: Avoid unnecessary calls to Article::getContext().

Kunal Mehta <legoktm@member.fsf.org> committed rMWc52bf8123741: EditPage: Stop using globals for configuration in non-static functions.

Kunal Mehta <legoktm@member.fsf.org> committed rMWdefa135d2cd2: EditPage: Don't use $wgRequest.

Kunal Mehta <legoktm@member.fsf.org> committed rMW552ccdb91faf: EditPage: Try to avoid using $wgTitle.

Chad Horohoe <chadh@wikimedia.org> committed rMWd96e2075ea94: Adding submodules of bundled REL1_30 extensions/skins/vendor.