dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b675be2) | patch
SECURITY: Do not allow undeleting a revdel'd file if its top file
authorBrian Wolff <bawolff+wn@gmail.com>
Mon, 18 Apr 2016 16:45:56 +0000 (12:45 -0400)
committerChad <chadh@wikimedia.org>
Tue, 23 Aug 2016 02:03:56 +0000 (02:03 +0000)
commit5c24203c6ed3153a629eb2e6b812b96f27155bd0
treebaae38a4da29dbc5b64bd37eb2a539f8a8da854dtree | snapshot
parentb675be20835d911a35ff9e6ce859095246b469c5commit | diff
SECURITY: Do not allow undeleting a revdel'd file if its top file

This prevents admins being able to view suppressed files, by simply
deleting them, and then undeleting only the file revision that they
want to view.

This dates back to r43288. Unclear if it was intentional.

Bug: T132926
Change-Id: Ib767de853a37099305db20529378fa756ee1bdfe
includes/filerepo/file/LocalFile.php diff | blob | history
Wiklou, le Wiki du Wiklou