api.php?oxrigin=https%3A%2F%2Fwww.mediawiki.org&*
ActivePublic
Actions

Authored by matmarex on Apr 13 2016, 9:32 PM.

Tags

None

Referenced Files

	F3870416: var_dump( $_SERVER ) for: https://commons.wikimedia.org/w/api.php?oxrigin=https%3A%2F%2Fwww.mediawiki.org&*
	Apr 13 2016, 9:32 PM

Subscribers

None

	array(53) {
	["REQUEST_START_TIME"]=>
	int(1460582150)
	["REQUEST_TIME"]=>
	int(1460582150)
	["REQUEST_TIME_FLOAT"]=>
	float(1460582150.8149)
	["HTTP_ACCEPT_ENCODING"]=>
	string(4) "gzip"
	["HTTP_ACCEPT_LANGUAGE"]=>
	string(23) "en-US,en;q=0.8,he;q=0.6"
	["HTTP_X_FORWARDED_PROTO"]=>
	string(5) "https"
	["HTTP_X_CLIENT_IP"]=>
	string(12) "198.73.209.4"
	["HTTP_CONNECTION"]=>
	string(5) "close"
	["HTTP_X_CONNECTION_PROPERTIES"]=>
	string(62) "SPDY=3.1; SSR=1; SSL=TLSv1.2; C=ECDHE-ECDSA-AES128-GCM-SHA256;"
	["HTTP_X_VARNISH"]=>
	string(46) "1096453307, 2202294892, 1333998961, 1664847115"
	["HTTP_USER_AGENT"]=>
	string(119) "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2683.0 Safari/537.36"
	["HTTP_X_WMF_LASTSTAMP"]=>
	string(11) "13-Apr-2016"
	["HTTP_CONTENT_TYPE"]=>
	string(0) ""
	["HTTP_UPGRADE_INSECURE_REQUESTS"]=>
	string(1) "1"
	["HTTP_X_FORWARDED_FOR"]=>
	string(89) "198.73.209.4, 10.128.0.118, 10.128.0.118, 10.128.0.117, 10.192.48.27, ::ffff:10.64.32.105"
	["HTTP_AUTHORIZATION"]=>
	string(0) ""
	["HTTP_CONTENT_LENGTH"]=>
	string(0) ""
	["HTTP_HOST"]=>
	string(21) "commons.wikimedia.org"
	["HTTP_CACHE_CONTROL"]=>
	string(9) "max-age=0"
	["HTTP_X_WIKIMEDIA_DEBUG"]=>
	string(26) "backend=mw1099.eqiad.wmnet"
	["HTTP_ACCEPT"]=>
	string(74) "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8"
	["GATEWAY_INTERFACE"]=>
	string(7) "CGI/1.1"
	["SERVER_ADDR"]=>
	string(11) "10.64.16.79"
	["SERVER_NAME"]=>
	string(21) "commons.wikimedia.org"
	["SERVER_PORT"]=>
	string(2) "80"
	["SERVER_SOFTWARE"]=>
	string(18) "mw1099.eqiad.wmnet"
	["SERVER_PROTOCOL"]=>
	string(8) "HTTP/1.0"
	["SERVER_ADMIN"]=>
	string(23) "webmaster@wikimedia.org"
	["SERVER_SIGNATURE"]=>
	string(0) ""
	["SCRIPT_NAME"]=>
	string(10) "/w/api.php"
	["proxy-nokeepalive"]=>
	string(1) "1"
	["SCRIPT_FILENAME"]=>
	string(40) "/srv/mediawiki/docroot/commons/w/api.php"
	["CONTEXT_DOCUMENT_ROOT"]=>
	string(30) "/srv/mediawiki/docroot/commons"
	["REQUEST_SCHEME"]=>
	string(4) "http"
	["REMOTE_PORT"]=>
	int(50763)
	["REMOTE_ADDR"]=>
	string(13) "10.192.16.173"
	["QUERY_STRING"]=>
	string(41) "oxrigin=https%3A%2F%2Fwww.mediawiki.org&*"
	["REQUEST_URI"]=>
	string(52) "/w/api.php?oxrigin=https%3A%2F%2Fwww.mediawiki.org&*"
	["CONTEXT_PREFIX"]=>
	string(0) ""
	["REQUEST_METHOD"]=>
	string(3) "GET"
	["UNIQUE_ID"]=>
	string(24) "Vw63BgpAEE8AACnUh@UAAAAJ"
	["SCRIPT_URI"]=>
	string(38) "http://commons.wikimedia.org/w/api.php"
	["DOCUMENT_ROOT"]=>
	string(30) "/srv/mediawiki/docroot/commons"
	["PATH"]=>
	string(60) "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
	["RW_PROTO"]=>
	string(5) "https"
	["SCRIPT_URL"]=>
	string(10) "/w/api.php"
	["PHP_SELF"]=>
	string(10) "/w/api.php"
	["PATH_TRANSLATED"]=>
	string(40) "/srv/mediawiki/docroot/commons/w/api.php"
	["HTTPS"]=>
	string(0) ""
	["argv"]=>
	array(1) {
	[0]=>
	string(41) "oxrigin=https%3A%2F%2Fwww.mediawiki.org&*"
	}
	["argc"]=>
	int(1)
	["THREAD_TYPE"]=>
	string(11) "Web Request"
	}

Event Timeline

matmarex created this paste.Apr 13 2016, 9:32 PM

matmarex mentioned this in T132629: Data passed to HHVM ($_SERVER variables) is a mixed bag of already-decoded and non-decoded nonsense.Apr 13 2016, 9:34 PM

Anomie mentioned this in T132612: api.php gives a 302 redirect to URL with '&*' appended, breaking CORS requests.Apr 14 2016, 1:07 PM

var_dump( $_SERVER ) for: https://commons.wikimedia.org/w/api.php?oxrigin=https%3A%2F%2Fwww.mediawiki.org&*ActivePublicActions

Event Timeline

var_dump( $_SERVER ) for: https://commons.wikimedia.org/w/api.php?oxrigin=https%3A%2F%2Fwww.mediawiki.org&*
ActivePublic
Actions