Go to file
Kosta Harlan 05da3118aa
Protected variable logs: fallback to accountname if user_name is not set
Why:

- For account creations and account autocreations, the user_name
  property is deliberately unset, to avoid displaying the IP address of
  an unregistered user. Instead, `accountname` is set with the newly
  created account name
- For logging that someone has seen a protected variable value, we need
  to record the username that was seen

What:

- Use `accountname` as a fallback in case `user_name` is not set, when
  logging protected variable access
- Update tests to cover this case.

Bug: T376885
Change-Id: I688a3529fac0ad8455977a0cfdb950f0105f550d
2024-10-21 21:15:51 +02:00
.phan
db_patches
i18n Localisation updates from https://translatewiki.net. 2024-10-15 09:38:49 +02:00
includes Protected variable logs: fallback to accountname if user_name is not set 2024-10-21 21:15:51 +02:00
maintenance Specify caller in DB queries 2024-09-11 15:20:11 +02:00
modules More effective use of LESS 2024-08-07 09:26:42 +03:30
tests Protected variable logs: fallback to accountname if user_name is not set 2024-10-21 21:15:51 +02:00
.eslintignore Add docs, i18n to eslintignore 2024-09-24 12:40:48 +01:00
.eslintrc.json
.gitignore
.gitreview
.phpcs.xml
.stylelintrc.json
AbuseFilter.alias.php
CODE_OF_CONDUCT.md
composer.json build: Updating mediawiki/mediawiki-codesniffer to 44.0.0 2024-08-10 15:45:06 +00:00
COPYING
extension.json Log specific views of protected variables 2024-10-02 00:53:34 -07:00
Gruntfile.js
package-lock.json build: Updating micromatch to 4.0.8 2024-08-24 14:37:14 +00:00
package.json
quibble.yaml