Merge "SECURITY: Fix reauth in Special:ChangeEmail"
authorjenkins-bot <jenkins-bot@gerrit.wikimedia.org>
Thu, 6 Jun 2019 18:26:01 +0000 (18:26 +0000)
committerGerrit Code Review <gerrit@wikimedia.org>
Thu, 6 Jun 2019 18:26:01 +0000 (18:26 +0000)
includes/specials/SpecialChangeEmail.php

index 8d5cf85..9ce8760 100644 (file)
@@ -55,14 +55,16 @@ class SpecialChangeEmail extends FormSpecialPage {
         * @param string $par
         */
        function execute( $par ) {
-               $this->checkLoginSecurityLevel();
-
                $out = $this->getOutput();
                $out->disallowUserJs();
 
                parent::execute( $par );
        }
 
+       protected function getLoginSecurityLevel() {
+               return $this->getName();
+       }
+
        protected function checkExecutePermissions( User $user ) {
                if ( !AuthManager::singleton()->allowsPropertyChange( 'emailaddress' ) ) {
                        throw new ErrorPageError( 'changeemail', 'cannotchangeemail' );