dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b6e3d8d) | patch
[SECURITY] [API BREAKING CHANGE] Require logout token.
authorsbassett <sbassett@wikimedia.org>
Tue, 16 Apr 2019 22:09:43 +0000 (17:09 -0500)
committerSBassett <sbassett@wikimedia.org>
Wed, 24 Apr 2019 15:38:40 +0000 (15:38 +0000)
commitd965b0b4652b566b1f53be756c13190b958dd7fa
treede99e7b22a38d0739ad3686a77b4b4d1de4f2f83tree | snapshot
parentb6e3d8df08516906287015c6d826f36d47d85fe2commit | diff
[SECURITY] [API BREAKING CHANGE] Require logout token.

Special:Userlogout now requires a token

Api action=logout requires a csrf token and the request to be POSTed

Patch author: bawolff

Bug: T25227
Change-Id: Icb674095956bb3f6c847c9553c53e404402ea774
RELEASE-NOTES-1.33 diff | blob | history
includes/api/ApiLogout.php diff | blob | history
includes/skins/SkinTemplate.php diff | blob | history
includes/specials/SpecialUserLogout.php diff | blob | history
languages/i18n/en.json diff | blob | history
languages/i18n/qqq.json diff | blob | history
tests/phpunit/includes/api/ApiLogoutTest.php [new file with mode: 0644] blob
Wiklou, le Wiki du Wiklou