Contents of restricted page are leaked through action=compare API

The contents of a restricted page can be leaked by using the compare API, which does not perform the proper validation checks. This might need to be patched by core.