| commit | ac07cc0362d48d8b1986db36f31035c81835bdf8 | |
| author | Taavi Väänänen <hi@taavi.wtf> | |
| Mon, 23 May 2022 15:06:11 +0000 (23 18:06 +0300) | ||
| committer | Reedy <reedy@wikimedia.org> | |
| Thu, 2 Jun 2022 20:48:29 +0000 (2 22:48 +0200) | ||
| tree | 94a86c884cbba6ce1a2dc6ba22a31769f638dac7 | treesnapshot (tar.gz zip) |
| parent | 9d854908bb9c433ca477a227161538304fd2f287 | commitdiff |
SECURITY: ApiEditPage: update title after redirects
Otherwise permission checks are directed to the old title which makes it
possibly to bypass protection via redirects.
Bug: T309028
Change-Id: I157df365439b09416639e6ea2beefc01b60e6264
Otherwise permission checks are directed to the old title which makes it
possibly to bypass protection via redirects.
Bug: T309028
Change-Id: I157df365439b09416639e6ea2beefc01b60e6264
| includes/api/ApiEditPage.php | diffblobblamehistory |