SECURITY: escape sortKey in pageInfo

DEFAULTSORT isn't escaped before being added to the action=info table.

Bug: 63251
Change-Id: I087bfde8cbc69c3507f68ee3cb6e22aba0ffa7db
Updated release notes and version number of MediaWiki 1.22.6

This is MediaWiki 1.22.6 security release

Change-Id: I1be03b64a52996e7adcf25e9f9354000c24f38f9
Fixed stream wrapper in PhpHttpRequest

Issue introduced when SSL verification was added to PHPHttpRequest.
For HTTP and HTTPS stream, PHP expects "http" as the steam context
name, regardless of SSL.

Change-Id: I12c5d3d9aded6e704ebabe85b86e556fd0e99479
Follows-Up: 1c927b1df2a (Iab2bda1ebc)
Bug: 56047
(cherry picked from commit 499e5fd4877416c65d71118bff5d769b75883cb0)
Add missing uploadstash.us_props for PostgreSQL

This field was introduced in e5d41cca909a8ec1b19c6c080388c885854be3f7
but only for MySQL.

Change-Id: I057b1dd845a5ab7ae05f5597454981a6e2c12698
(cherry picked from commit c7f4586fe1e405e5ad8e4e504b024248a36eef57)
Add space between two feed links

When more than one feed link was given, the links was concat without a
space, which looks odd. Adding now a space, between each link in the
toolbox.

Bug: 36356
Change-Id: Iaf61c88dde0a92c475a60c005e13222eb7618eef
(cherry picked from commit 853877f93af5056dc3162a7fc83957681674ca0c)
Use an actual URL for helppage in enotif_body

The helppage can be a full URL, which canonicalurl doesn't like.

This means that if a wiki
* has a custom enotif_body which uses canonicalurl + helppage, but
* doesn't have helppage defined locally (as local/interwiki title),
then it will still have to fix either of the two locally.

Bug: 63269
Change-Id: I82d26b648ef23b69ae4fbd0a74ffa23eb7a93dae
(cherry picked from commit dccbb7b402af49689fec931ac8ee163dcdb8bc89)
SECURITY: Don't parse usernames as wikitext

On Special:PasswordReset, don't parse the username as wikitext since
the wikitext is parsed according to the wiki's configuration (might
include wgRawHtml), and the wiki may be private.

Bug: 65501
Change-Id: Ic3e5d42e1be5acc42ba89ae853c5ecbfec04fa91
Updated release notes and version number for MediaWiki 1.22.7

This is MediaWiki 1.22.7 security and maintenance release

Change-Id: Ic35cb3d3add3e6119d4e7a9a6ceb33bc959f6bf0
Upgrade to Mediawiki 1.22.7