jquery.tablesorter: Add missing dependency on jquery.mwExtension

Partial backport of e9186da84.

Bug: 52606
Change-Id: I6429a233b8679689255b5a952c5496d43ee341fa
Purge upstream caches when deleting file assets.

Inform upstream caches when a file asset is deleted by calling
SquidUpdate::purge(). This helps prevent unintentional information leakage in
the event that the asset is being deleted for reasons of license or content.

Bug: 51064
Change-Id: Ibf57e8f32d7dd04b8508a69706be5a40b49e5abd
Release note update for bug 51064.

Change-Id: Ie9387abbf39d41b3376286a18456fd2c83a58df8
Merge "Release note update for bug 51064." into REL1_19
(bug 50078) Allow a string other than '*' as condition for DatabaseBase::delete()

Currently, either '*' is given as condition meaning "everything" or an array must
be passed since DatabaseBase::makeList() requires an array. Now the parameter is
consistent with one of other similar methods, since a string will be handled
correctly.

Bug: 50078
Change-Id: Id5a8220d21245669f1091a3b5ed1def65b22d375
(cherry picked from commit b18770232c679482e0c7bf775b84eda5f7f3b782)
fixed wrong version number in HISTORY

Change-Id: I0e702b7b3ea886ba725eb83dde0e0ad9eb6e2f38
SECURITY: Fix extension detection with 2 .'s

Fix IE6 extension detection, to prevent XSS in the API response.

Bug: 52746
Change-Id: If58a81b62209b36bd143a1766a8a20c9c34dbe3b
SECURITY: Prevent tokens in jsonp mode

Add checks to token-returning functions to prevent returning tokens in
jsonp mode. This affects action=login, action=block, action=unblock, and
action=query&list=deletedrevs.

Bug: 49090
Change-Id: Ibeaa5c72d8084585092b15935a3f5709104bf7f7
SECURITY: Sanitize ResourceLoader exception messages

Prevent path disclosure when $wgShowExceptionDetails is false

Bug: 52746
Change-Id: Ia14ae21972192d291cb86dce65568e9e8b4674f7
Update Releasenotes and version number for 1.19.8

Change-Id: I6b1df7c8a3ee91f2aaf6c14740028c76988ed602
Follow-up 42333412833a - Fix behaviour $wgVerifyMimeType = false;

Bug: 49717
Change-Id: If1d6e8fed575bf2816a10db066ec4e023460ee1e
(cherry picked from commit 337fd7790e8d5e3a9983225c56adcd8ea8d496e7)
(cherry picked from commit dadfe0ae9349dd0bf5e1d3bedc8887289818fda1)
(cherry picked from commit adcf34af1273dd5868b21f4268d56f856b4403e5)
(cherry picked from commit 622bc8a465e1f4df719841a2e75fb098f66e87ec)
Merge "fixed wrong version number in HISTORY" into REL1_19
Backport compatible message changes from master.

Change-Id: Ic78ae1370c357fe7ac62146143e2ad7f71d1b3fa
Add missing entry to messages.inc

Change-Id: I86a562abc2e5414a3f3f2348e1022adf2f6dbf98
Localisation updates from http://translatewiki.net.

Change-Id: I133262ff2cc2c49fe3dac5ef5e72cd417ca9cf48
let us easily override PHPUnit version

The new --with-phpunitdir let us specify a git checkout of PHPUnit. That
will ease regression testing of the upstream new version. Usage is
straightforward:

Checkout PHPUnit from git as instructed on:
https://github.com/sebastianbergmann/phpunit#readme

Invoke our test suite with:
 $ cd maintenance/tests
 $ php phpunit.php --with-phpunitdir /path/you/just/checked/out

Cherry-picked from 3b9a3678b35ba6c2c4158d230393161a37f21e86

Change-Id: I8a9af0deac4dd74e3c8bde73535555c54ac83766
SECURITY: Improve css javascript detection

* Forbid vertical tabs
* Convert Fullwidth, sup/sub script, IPA, and repetition unicode to
ascii, for ie6

Bug: 55332
Change-Id: I41a71b5b8fbecadd0f958cf57cc90d4c2fd9366e
SECURITY: Don't cache when a call could autocreate

Fixes for action=raw (used when sites include other site's javascript),
and stashed images.

Bug: 53032
Change-Id: I8f915f6a4756f750c74d9ee9bec58f7ba6c0c827
Update Releasenotes and version number for 1.19.9

Change-Id: Ibde7ab8b24d49e11181d11c2fafb622a71bbaa42
Localisation updates from https://translatewiki.net.

Change-Id: Ic4a641e79ec03aeeb2179f37b22d9d1f9b50a471