Dan [Sun, 24 Feb 2008 19:55:22 -0500] rev 462
Minor standards-compliance fix in Request_HTTP
Dan [Sun, 24 Feb 2008 17:50:38 -0500] rev 461
Fixed a number of IE6 bugs
Dan [Sun, 24 Feb 2008 12:52:07 -0500] rev 460
Merging in changes from Nighthawk
Dan [Sun, 24 Feb 2008 12:50:52 -0500] rev 459
Upgraded tinyMCE to 3.0.1 in hopes of fixing IE race conditions. Fixed a couple minor syntax errors in Javascript objects declared in various places.
Dan [Fri, 22 Feb 2008 12:51:53 -0500] rev 458
Merging fixes and updates from stable branch
Dan [Fri, 22 Feb 2008 12:46:51 -0500] rev 457
Fixed: RenderMan::getPage() failing with access denial when fetching template and view_source results in deny
Dan [Fri, 01 Feb 2008 22:31:57 -0500] rev 456
Made all captcha fields case-insensitive (thanks pkeating)
Dan [Thu, 31 Jan 2008 22:28:40 -0500] rev 455
Merging scribus and nighthawk branches
Dan [Thu, 31 Jan 2008 21:52:39 -0500] rev 454
Fixed special pages being returned with subpage information inappropriately from $paths->get_pageid_from_url()
Dan [Thu, 31 Jan 2008 22:28:12 -0500] rev 453
Fixed jBox menus failing to appear when window scrolled down
Dan [Mon, 28 Jan 2008 23:07:32 -0500] rev 452
Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)
Dan [Mon, 28 Jan 2008 23:06:38 -0500] rev 451
Re-applying the revision with the comment fix (bad merge a couple revs back)
Dan [Sun, 27 Jan 2008 23:43:24 -0500] rev 450
Fixed case where HTML comments were getting stripped when opening tag not followed by whitespace (<!--foo--> was stripped, <!-- foo --> was not, neither is stripped now)
Dan [Wed, 23 Jan 2008 19:36:42 -0500] rev 449
Merging in a couple revisions from Nighthawk
Dan [Sun, 20 Jan 2008 23:18:03 -0500] rev 448
Fixed broken regenCaptcha() in Special:Register
Dan [Sat, 19 Jan 2008 00:47:52 -0500] rev 447
Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.