mediawiki-extensions-AbuseF.../includes/Api
Kosta Harlan 05da3118aa
Protected variable logs: fallback to accountname if user_name is not set
Why:

- For account creations and account autocreations, the user_name
  property is deliberately unset, to avoid displaying the IP address of
  an unregistered user. Instead, `accountname` is set with the newly
  created account name
- For logging that someone has seen a protected variable value, we need
  to record the username that was seen

What:

- Use `accountname` as a fallback in case `user_name` is not set, when
  logging protected variable access
- Update tests to cover this case.

Bug: T376885
Change-Id: I688a3529fac0ad8455977a0cfdb950f0105f550d
2024-10-21 21:15:51 +02:00
..
AbuseLogPrivateDetails.php Api: Avoid type error in AbuseLogPrivateDetails 2024-08-21 14:31:46 +02:00
CheckMatch.php SECURITY: abusefiltercheckmatch: Check if user can see log details 2024-10-01 00:18:55 +01:00
CheckSyntax.php Call IContextSource::getAuthority instead of IContextSource::getUser 2022-07-03 16:37:18 +02:00
EvalExpression.php Use StatusValue::getMessages() instead of deprecated methods 2024-05-28 21:04:59 +00:00
QueryAbuseFilters.php Use expression builder instead of raw sql 2024-07-21 22:07:58 +02:00
QueryAbuseLog.php Protected variable logs: fallback to accountname if user_name is not set 2024-10-21 21:15:51 +02:00
UnblockAutopromote.php Avoid TestUser in non-database tests 2023-08-06 22:18:49 +00:00