32 if ( $wgMangleFlashPolicy ) {
35 if ( $wgValidateAllHtml ) {
36 $headers = headers_list();
38 foreach ( $headers
as $header ) {
39 $parts = explode(
':', $header, 2 );
40 if ( count( $parts ) !== 2 ) {
43 $name = strtolower( trim( $parts[0] ) );
44 $value = trim( $parts[1] );
45 if (
$name ==
'content-type' && ( strpos(
$value,
'text/html' ) === 0
46 || strpos(
$value,
'application/xhtml+xml' ) === 0 )
56 if ( !$wgDisableOutputCompression && !ini_get(
'zlib.output_compression' ) ) {
57 if ( !defined(
'MW_NO_OUTPUT_COMPRESSION' ) ) {
60 if ( !ini_get(
'output_handler' ) ) {
77 if ( isset( $_SERVER[
'REQUEST_URI'] ) ) {
79 list(
$path ) = explode(
'?', $_SERVER[
'REQUEST_URI'], 2 );
80 } elseif ( isset( $_SERVER[
'SCRIPT_NAME'] ) ) {
82 $path = $_SERVER[
'SCRIPT_NAME'];
88 $period = strrpos(
$path,
'.' );
89 if ( $period !==
false ) {
90 return strtolower( substr(
$path, $period ) );
104 if ( !function_exists(
'gzencode' ) ) {
105 wfDebug( __FUNCTION__ .
"() skipping compression (gzencode unavailable)\n" );
108 if ( headers_sent() ) {
109 wfDebug( __FUNCTION__ .
"() skipping compression (headers already sent)\n" );
114 if (
$ext ==
'.gz' ||
$ext ==
'.tgz' ) {
123 wfDebug( __FUNCTION__ .
"() is compressing output\n" );
124 header(
'Content-Encoding: gzip' );
125 $s = gzencode(
$s, 6 );
129 $headers = headers_list();
131 foreach ( $headers
as $header ) {
132 $headerName = strtolower( substr( $header, 0, 5 ) );
133 if ( $headerName ==
'vary:' ) {
139 header(
'Vary: Accept-Encoding' );
141 if ( $wgUseKeyHeader ) {
142 header(
'Key: Accept-Encoding;match=gzip' );
156 # Avoid weird excessive memory usage in PCRE on big articles
157 if ( preg_match(
'/<\s*cross-domain-policy(?=\s|>)/i',
$s ) ) {
158 return preg_replace(
'/<(\s*)(cross-domain-policy(?=\s|>))/i',
'<$1NOT-$2',
$s );
171 && isset( $_SERVER[
'SERVER_PROTOCOL'] )
172 && $_SERVER[
'SERVER_PROTOCOL'] ==
'HTTP/1.0'
174 header(
"Content-Length: $length" );
192 header(
'Cache-Control: no-cache' );
197 $error = strtok( $errors,
"\n" );
199 while ( $error !==
false ) {
200 if ( preg_match(
'/^line (\d+)/', $error, $m ) ) {
201 $lineNum = intval( $m[1] );
202 $badLines[$lineNum] =
true;
204 Html::element(
'a', [
'href' =>
"#line-{$lineNum}" ], $error ) ) .
"\n";
206 $error = strtok(
"\n" );
214 while (
$line !==
false ) {
216 if ( isset( $badLines[$i] ) ) {
217 $attrs[
'class'] =
'highlight';
218 $attrs[
'id'] =
"line-$i";
221 $line = strtok(
"\n" );
227 .highlight { background-
color: #ffc }
228 li { white-space: pre }
static closeElement($element)
Returns "</$element>".
deferred txt A few of the database updates required by various functions here can be deferred until after the result page is displayed to the user For updating the view updating the linked to tables after a etc PHP does not yet have any way to tell the server to actually return and disconnect while still running these but it might have such a feature in the future We handle these by creating a deferred update object and putting those objects on a global list
this hook is for auditing only or null if authentication failed before getting that far or null if we can t even determine that probably a stub it is not rendered in wiki pages or galleries in category pages allow injecting custom HTML after the section Any uses of the hook need to handle escaping see BaseTemplate::getToolbox and BaseTemplate::makeListItem for details on the format of individual items inside of this array or by returning and letting standard HTTP rendering take place modifiable or by returning false and taking over the output $out
$wgUseKeyHeader
Send the Key HTTP header for better caching.
static rawElement($element, $attribs=[], $contents= '')
Returns an HTML element in a string.
static checkErrors($text, &$errorStr=null)
Check HTML for errors, used if $wgValidateAllHtml = true.
$wgDisableOutputCompression
Disable output compression (enabled by default if zlib is available)
when a variable name is used in a it is silently declared as a new local masking the global
$wgValidateAllHtml
Validate the overall output using tidy and refuse to display the page if it's not valid...
wfDebug($text, $dest= 'all', array $context=[])
Sends a line to the debug log if enabled or, optionally, to a comment in output.
wfGzipHandler($s)
Handler that compresses data with gzip if allowed by the Accept header.
static openElement($element, $attribs=[])
Identical to rawElement(), but has no third parameter and omits the end tag (and the self-closing '/'...
wfOutputHandler($s)
Standard output handler for use with ob_start.
wfClientAcceptsGzip($force=false)
wfDoContentLength($length)
Add a Content-Length header if possible.
wfHtmlValidationHandler($s)
Replace the output with an error if the HTML is not valid.
static inlineStyle($contents, $media= 'all')
Output a "<style>" tag with the given contents for the given media type (if any). ...
static htmlHeader(array $attribs=[])
Constructs the opening html-tag with necessary doctypes depending on global variables.
This document is intended to provide useful advice for parties seeking to redistribute MediaWiki to end users It s targeted particularly at maintainers for Linux since it s been observed that distribution packages of MediaWiki often break We ve consistently had to recommend that users seeking support use official tarballs instead of their distribution s and this often solves whatever problem the user is having It would be nice if this could such as
in the sidebar</td >< td > font color
wfRequestExtension()
Get the "file extension" that some client apps will estimate from the currently-requested URL...
injection txt This is an overview of how MediaWiki makes use of dependency injection The design described here grew from the discussion of RFC T384 The term dependency this means that anything an object needs to operate should be injected from the the object itself should only know narrow no concrete implementation of the logic it relies on The requirement to inject everything typically results in an architecture that based on two main types of and essentially stateless service objects that use other service objects to operate on the value objects As of the beginning MediaWiki is only starting to use the DI approach Much of the code still relies on global state or direct resulting in a highly cyclical dependency which acts as the top level factory for services in MediaWiki which can be used to gain access to default instances of various services MediaWikiServices however also allows new services to be defined and default services to be redefined Services are defined or redefined by providing a callback the instantiator that will return a new instance of the service When it will create an instance of MediaWikiServices and populate it with the services defined in the files listed by thereby bootstrapping the DI framework Per $wgServiceWiringFiles lists includes ServiceWiring php
$wgMangleFlashPolicy
When OutputHandler is used, mangle any output that contains <cross-domain-policy>.
static element($element, $attribs=[], $contents= '')
Identical to rawElement(), but HTML-escapes $contents (like Xml::element()).
wfMangleFlashPolicy($s)
Mangle flash policy tags which open up the site to XSS attacks.
Allows to change the fields on the form that will be generated $name