MediaWiki 1.4.5<\/a> is a security update and bugfix release.<\/p>\nIncorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki.<\/p><\/blockquote>\n
ciuaz<\/p>\n","protected":false},"excerpt":{"rendered":"
Consiglio caldamente l’upgrade di mediawiki MediaWiki 1.4.5 is a security update and bugfix release. Incorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki. ciuaz<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[13,9],"tags":[176,2248,217,218],"class_list":["post-1440","post","type-post","status-publish","format-standard","hentry","category-open-source","category-php","tag-opensource","tag-php","tag-security","tag-wiki"],"yoast_head":"\n
mediawiki 1.4.5 - Fullo<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"mediawiki 1.4.5 - Fullo\" \/>\n<meta property=\"og:description\" content=\"Consiglio caldamente l’upgrade di mediawiki MediaWiki 1.4.5 is a security update and bugfix release. Incorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki. ciuaz\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/\" \/>\n<meta property=\"og:site_name\" content=\"Fullo\" \/>\n<meta property=\"article:published_time\" content=\"2005-06-07T09:49:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2005-06-07T09:50:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2021\/05\/FB_IMG_1515748807284.jpg?fit=1453%2C1453&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"1453\" \/>\n\t<meta property=\"og:image:height\" content=\"1453\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Francesco Fullone\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@fullo\" \/>\n<meta name=\"twitter:site\" content=\"@fullo\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Francesco Fullone\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/\"},\"author\":{\"name\":\"Francesco Fullone\",\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#\\\/schema\\\/person\\\/24e91bc6caea6c411a8668df5639428c\"},\"headline\":\"mediawiki 1.4.5\",\"datePublished\":\"2005-06-07T09:49:44+00:00\",\"dateModified\":\"2005-06-07T09:50:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/\"},\"wordCount\":44,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#\\\/schema\\\/person\\\/24e91bc6caea6c411a8668df5639428c\"},\"keywords\":[\"opensource\",\"php\",\"security\",\"wiki\"],\"articleSection\":[\"open source\",\"php\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/\",\"url\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/\",\"name\":\"mediawiki 1.4.5 - Fullo\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#website\"},\"datePublished\":\"2005-06-07T09:49:44+00:00\",\"dateModified\":\"2005-06-07T09:50:12+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/2005\\\/06\\\/07\\\/mediawiki-145\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"mediawiki 1.4.5\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/\",\"name\":\"Fullo\",\"description\":\"nulla e' impossibile per chi non lo deve fare!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#\\\/schema\\\/person\\\/24e91bc6caea6c411a8668df5639428c\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/#\\\/schema\\\/person\\\/24e91bc6caea6c411a8668df5639428c\",\"name\":\"Francesco Fullone\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.fullo.net\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.fullo.net\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.fullo.net\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1\",\"width\":622,\"height\":622,\"caption\":\"Francesco Fullone\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.fullo.net\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1\"},\"sameAs\":[\"http:\\\/\\\/www.fullo.net\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/fullo\",\"https:\\\/\\\/x.com\\\/fullo\"],\"url\":\"https:\\\/\\\/www.fullo.net\\\/blog\\\/author\\\/fullo\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"mediawiki 1.4.5 - Fullo","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/","og_locale":"it_IT","og_type":"article","og_title":"mediawiki 1.4.5 - Fullo","og_description":"Consiglio caldamente l’upgrade di mediawiki MediaWiki 1.4.5 is a security update and bugfix release. Incorrect handling of page template inclusions made it possible to inject JavaScript code into HTML attributes, which could lead to cross-site scripting attacks on a publicly editable wiki. ciuaz","og_url":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/","og_site_name":"Fullo","article_published_time":"2005-06-07T09:49:44+00:00","article_modified_time":"2005-06-07T09:50:12+00:00","og_image":[{"width":1453,"height":1453,"url":"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2021\/05\/FB_IMG_1515748807284.jpg?fit=1453%2C1453&ssl=1","type":"image\/jpeg"}],"author":"Francesco Fullone","twitter_card":"summary_large_image","twitter_creator":"@fullo","twitter_site":"@fullo","twitter_misc":{"Scritto da":"Francesco Fullone"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/#article","isPartOf":{"@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/"},"author":{"name":"Francesco Fullone","@id":"https:\/\/www.fullo.net\/blog\/#\/schema\/person\/24e91bc6caea6c411a8668df5639428c"},"headline":"mediawiki 1.4.5","datePublished":"2005-06-07T09:49:44+00:00","dateModified":"2005-06-07T09:50:12+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/"},"wordCount":44,"commentCount":0,"publisher":{"@id":"https:\/\/www.fullo.net\/blog\/#\/schema\/person\/24e91bc6caea6c411a8668df5639428c"},"keywords":["opensource","php","security","wiki"],"articleSection":["open source","php"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/","url":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/","name":"mediawiki 1.4.5 - Fullo","isPartOf":{"@id":"https:\/\/www.fullo.net\/blog\/#website"},"datePublished":"2005-06-07T09:49:44+00:00","dateModified":"2005-06-07T09:50:12+00:00","breadcrumb":{"@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fullo.net\/blog\/2005\/06\/07\/mediawiki-145\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fullo.net\/blog\/"},{"@type":"ListItem","position":2,"name":"mediawiki 1.4.5"}]},{"@type":"WebSite","@id":"https:\/\/www.fullo.net\/blog\/#website","url":"https:\/\/www.fullo.net\/blog\/","name":"Fullo","description":"nulla e' impossibile per chi non lo deve fare!","publisher":{"@id":"https:\/\/www.fullo.net\/blog\/#\/schema\/person\/24e91bc6caea6c411a8668df5639428c"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fullo.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":["Person","Organization"],"@id":"https:\/\/www.fullo.net\/blog\/#\/schema\/person\/24e91bc6caea6c411a8668df5639428c","name":"Francesco Fullone","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2024\/10\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1","url":"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2024\/10\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2024\/10\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1","width":622,"height":622,"caption":"Francesco Fullone"},"logo":{"@id":"https:\/\/i0.wp.com\/www.fullo.net\/blog\/wp-content\/uploads\/2024\/10\/hawiaina-gold-circled-white.png?fit=622%2C622&ssl=1"},"sameAs":["http:\/\/www.fullo.net","https:\/\/www.linkedin.com\/in\/fullo","https:\/\/x.com\/fullo"],"url":"https:\/\/www.fullo.net\/blog\/author\/fullo\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p3OSc1-ne","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":1922,"url":"https:\/\/www.fullo.net\/blog\/2006\/04\/13\/mediawiki-163-e-mysql-4\/","url_meta":{"origin":1440,"position":0},"title":"Mediawiki 1.6.3 e MySQL 4","author":"Francesco Fullone","date":"13\/04\/2006","format":false,"excerpt":"Finalmente \u00e8 stato rilasciata la versione 1.6 di MediaWiki, il famoso Wiki engine scritto in PHP che gestisce, tra l'altro, la stessa WikiPedia. Ma perch\u00e8 finalmente? Perch\u00e8 adesso sono stati ufficialmente adottati tutti i criteri di antispam, come il CAPTCHA e le blacklist che tanto erano necessari in un software\u2026","rel":"","context":"In "php"","block_context":{"text":"php","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/php\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1716,"url":"https:\/\/www.fullo.net\/blog\/2005\/10\/28\/mediawiki-151-wiki-software\/","url_meta":{"origin":1440,"position":1},"title":"MediaWiki 1.5.1 & Wiki software","author":"Francesco Fullone","date":"28\/10\/2005","format":false,"excerpt":"Mi ero scordato di annunciare al mondo la versione 1.5 stabile di MediaWiki, ed ecco che mentre lo faccio esce la 1.5.1. In questa versione \u00e8 stato aggiunto il supporto completo al nuovo MySQL 5.0 e corretto il baco che impediva di visualizzare la pagina delle immagini. Ma non \u00e8\u2026","rel":"","context":"In "open source"","block_context":{"text":"open source","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/open-source\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1052,"url":"https:\/\/www.fullo.net\/blog\/2004\/10\/12\/wiki\/","url_meta":{"origin":1440,"position":2},"title":"wiki","author":"Francesco Fullone","date":"12\/10\/2004","format":false,"excerpt":"henry fuecks ha provato alcuni wiki e ne ha fatto una mini recensione, a suo parere la discriminante principale \u00e8 che il wiki possa funzionare anche senza un db alle spalle, sfruttando il file system come base di dati (pi\u00f9 o meno come fa twiki in perl). Personalmente ho finora\u2026","rel":"","context":"In "php"","block_context":{"text":"php","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/php\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1387,"url":"https:\/\/www.fullo.net\/blog\/2005\/05\/10\/grosse-novita-per-mediawiki\/","url_meta":{"origin":1440,"position":3},"title":"grosse novit\u00e0 per mediawiki","author":"Francesco Fullone","date":"10\/05\/2005","format":false,"excerpt":"\u00e8 stata rilasciata la versione 1.5alfa1 di mediawiki, le novit\u00e0 introdotte sono molte e molte altre arriveranno man mano. A questo punto spero solo che implementino un pannello di configurazione decente... ps non scordatevi di aggiornare mediawiki 1.4.x alla 1.4.4 ;) update ho trovato una piccola galleria di skin preconfezionate\u2026","rel":"","context":"In "open source"","block_context":{"text":"open source","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/open-source\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1605,"url":"https:\/\/www.fullo.net\/blog\/2005\/08\/22\/wikiwyg\/","url_meta":{"origin":1440,"position":4},"title":"wikiwyg","author":"Francesco Fullone","date":"22\/08\/2005","format":false,"excerpt":"Wikiwyg \u00e8 il classico editor Wysiwyg scritto in javascript ed inseribile nelle proprie applicazioni web, la cosa interessante di questo editor \u00e8 che supporta contemporaneamente differenti stili di rendering del testo. Sar\u00e0 quindi possibile salvare il proprio lavoro in un formato interpretabile da un wiki engine come mediawiki o direttamente\u2026","rel":"","context":"In "altri linguaggi"","block_context":{"text":"altri linguaggi","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/altri-linguaggi\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2094,"url":"https:\/\/www.fullo.net\/blog\/2006\/10\/24\/firestat-per-wordpress\/","url_meta":{"origin":1440,"position":5},"title":"FireStat per WordPress","author":"Francesco Fullone","date":"24\/10\/2006","format":false,"excerpt":"Riprendendo il post dello Skypecast sulle statistiche se vi interessa avere qualcosa di semplice da installare in WordPress (ma anche su Drupal, MediaWiki e Gregarius) date un occhio al progettino FireStat. La cosa interessante \u00e8 che questo piccolo script (caricato tramite include di php) permette di avere il conteggio degli\u2026","rel":"","context":"In "php"","block_context":{"text":"php","link":"https:\/\/www.fullo.net\/blog\/category\/tecnologia\/php\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/posts\/1440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/comments?post=1440"}],"version-history":[{"count":0,"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/posts\/1440\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/media?parent=1440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/categories?post=1440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fullo.net\/blog\/wp-json\/wp\/v2\/tags?post=1440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}