Pullup ticket #4094 - requested by wen
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.27
- www/mediawiki/PLIST                                           1.13
- www/mediawiki/distinfo                                        1.18

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   wen
   Date:           Fri Mar  8 07:57:29 UTC 2013

   Modified Files:
           pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log Message:
   Update to 1.20.3

   Upstream changes:
   MediaWiki 1.20.3

   This is a security and maintenance release of the MediaWiki 1.20 branch.
   Changes since 1.20.2
   New preference type - 'api'. Preferences of this type are not shown on
   Special:Preferences, but are still available via the action=options
   API. (Unbreaks MLEB.)
   (bug 44010) Context is passed to UserGetLanguageObject.
   The recursion guard on RequestContext::getLanguage() was weakened.
   (bug 40585) Don't drop 'step="any"' in HTML input fields.
   (bug 44024) Fixed problems in ObjectCache when using XCache.
   (bug 44010) FauxRequest leaked cookie data from primary request.
   (bug 44135/bug 42441) Pass '2' instead of 'true' to CURLOPT_SSL_VERIFYHOST
   (bug 43518) API action=unblock should return the user name, not the
   full user object
   (Bug 45355) Prevent read of arbitrary files through mwdoc-filter.php


   To generate a diff of this commit:
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/www/mediawiki/Makefile
   cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/mediawiki/PLIST
   cvs rdiff -u -r1.17 -r1.18 pkgsrc/www/mediawiki/distinfo
pullup 4094