SECURITY: Fix reauth in Special:ChangeEmail
authorBrian Wolff <bawolff+wn@gmail.com>
Fri, 15 Jun 2018 08:19:49 +0000 (08:19 +0000)
committerReedy <reedy@wikimedia.org>
Thu, 6 Jun 2019 16:14:57 +0000 (16:14 +0000)
commitcbe3c7c8e37d322eca797be23a9687b4b1273f97
treec6fb1b45feebc03d3583ec6dfdc17bd61deb61bc
parent5bc9a2772adc3e27cd535683eed2d20d10c58101
SECURITY: Fix reauth in Special:ChangeEmail

Previously you could bypass reauthentication by directly
POSTing to Special:ChangeEmail.

Bug: T197279
Change-Id: I674557351e0e91a8105c12ddf6cd30283aac9f7a
includes/specials/SpecialChangeEmail.php