[SECURITY] [API BREAKING CHANGE] Require logout token.
authorsbassett <sbassett@wikimedia.org>
Tue, 16 Apr 2019 22:09:43 +0000 (17:09 -0500)
committerReedy <reedy@wikimedia.org>
Thu, 25 Apr 2019 14:27:21 +0000 (15:27 +0100)
commitea2f3d1c3adfa62b67f905d2795bc997b424a3f8
tree2472702f57d1df302876df0da3c7479439b866ef
parent32fc919220e83872ada63e5e4954d9b7402a66ce
[SECURITY] [API BREAKING CHANGE] Require logout token.

Special:Userlogout now requires a token

Api action=logout requires a csrf token and the request to be POSTed

Patch author: bawolff

Bug: T25227
Change-Id: Icb674095956bb3f6c847c9553c53e404402ea774
RELEASE-NOTES-1.31
includes/api/ApiLogout.php
includes/skins/SkinTemplate.php
includes/specials/SpecialUserLogout.php
languages/i18n/en.json
languages/i18n/qqq.json
tests/phpunit/includes/api/ApiLogoutTest.php [new file with mode: 0644]