{"push_id":1517009894,"size":1,"distinct_size":1,"ref":"refs/heads/REL1_27","head":"8c43dc90dca3ae0013af89c0cd8df141a8ced507","before":"da2037a5bee58d3294e13434c2f054c6dbfe0f34","commits":[{"sha":"8c43dc90dca3ae0013af89c0cd8df141a8ced507","author":{"name":"Brad Jorsch","email":"5b09c674b0dae19df9f07eed292b4e9bba7cfc14@wikimedia.org"},"message":"Update git submodules\n\n* Update CentralAuth from branch 'REL1_27'\n  - SECURITY: Disallow user CSS/JS when centralauthtoken is in use\n    \n    This prevents an attacker from putting something bad in their\n    User:Me/apioutput.js or User:Me/apioutput.css and then using\n    centralauthtoken to cause it to be loaded for some other user.\n    \n    Bug: T144573\n    Change-Id: Ie0a68b6e71b8e8262539499b31f24a84152b4aa7\n    (cherry picked from commit ff8906162f583da889b04c323730d3c0aef6e2d7)","distinct":true,"url":"https://api.github.com/repos/wikimedia/mediawiki-extensions/commits/8c43dc90dca3ae0013af89c0cd8df141a8ced507"}]}
{"actor":{"display_login":"wmfgerrit"}}