Author: ziba

Description:
The new WebRequest::interpolateTitle method in 1.11 passes at least 2 arguments to WebRequest::extractTitle:

$path and $wgArticlePath

$path is urlencoded, $wgArticlePath is not.

WebRequest:extractTitle does a substring comparison on the two arguments. This works fine if there were no urlencoded characters in $path. But as soon as $path has a %20 or the like, WebRequest:extractTitle returns false, so WebRequest::interpolateTitle doesn't populate $_GET, so mediawiki redirects over and over trying to populate $_GET.

For my uses and simple testing so far, this solution seems to have worked:

In includes/WebRequest.php on line 53 change:

$path = $a['path'];

to

$path = urldecode($a['path']);

Thank you for your time in looking at this.

Version: 1.11.x
Severity: major