diff options
| author | Pierre Schmitz <pierre@archlinux.de> | 2008-03-03 09:36:49 +0100 |
|---|---|---|
| committer | Pierre Schmitz <pierre@archlinux.de> | 2008-03-03 09:36:49 +0100 |
| commit | 749e7fb2bae7bbda855de3c9e319435b9f698ff7 (patch) | |
| tree | a64763b24252286d6919665d2de481f8310022ef /includes/api/ApiQueryBase.php | |
| parent | cd613277ad3c5c601d3148b99377d97aa9656d6a (diff) | |
MediaWiki 1.11.2 released (security)
Diffstat (limited to 'includes/api/ApiQueryBase.php')
| -rw-r--r-- | includes/api/ApiQueryBase.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/includes/api/ApiQueryBase.php b/includes/api/ApiQueryBase.php index 28adb415..c810cfa7 100644 --- a/includes/api/ApiQueryBase.php +++ b/includes/api/ApiQueryBase.php @@ -215,6 +215,10 @@ abstract class ApiQueryBase extends ApiBase { } public function getTokenFlag($tokenArr, $action) { + if ($this->getMain()->getRequest()->getVal('callback') !== null) { + // Don't do any session-specific data. + return false; + } if (in_array($action, $tokenArr)) { global $wgUser; if ($wgUser->isAllowed($action)) |