diff options
Diffstat (limited to 'includes/OutputPage.php')
| -rw-r--r-- | includes/OutputPage.php | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/includes/OutputPage.php b/includes/OutputPage.php index 2f8094ab..55b1da00 100644 --- a/includes/OutputPage.php +++ b/includes/OutputPage.php @@ -2743,7 +2743,7 @@ $templates * call rather than a "<script src='...'>" tag. * @return string The html "<script>", "<link>" and "<style>" tags */ - protected function makeResourceLoaderLink( $modules, $only, $useESI = false, + public function makeResourceLoaderLink( $modules, $only, $useESI = false, array $extraQuery = array(), $loadCall = false ) { $modules = (array)$modules; @@ -3153,7 +3153,7 @@ $templates * have to be purged on configuration changes. * @return array */ - private function getJSVars() { + public function getJSVars() { global $wgContLang; $curRevisionId = 0; @@ -3289,6 +3289,10 @@ $templates if ( !$this->getTitle()->isJsSubpage() && !$this->getTitle()->isCssSubpage() ) { return false; } + if ( !$this->getTitle()->isSubpageOf( $this->getUser()->getUserPage() ) ) { + // Don't execute another user's CSS or JS on preview (T85855) + return false; + } return !count( $this->getTitle()->getUserPermissionsErrors( 'edit', $this->getUser() ) ); } |