Go to file
Daimona Eaytoy 103dfa3b66 Remove info leak
Oversighted/deleted edits and log actions were entirely accessible to
non-oversighters via AbuseFilter/examine for RC, and via AbuseFilter/test.
Now, we take into account the revision/log visibility and user permissions to
determine what to show.
Other changes in this patch:
*Show the examine link if and only if the user can examine the given row
*If a revision is hidden but the user can see it, don't hide its elements in
 ChangesList (only leave them striked/greyed)
*Make APIs better understand revision visibility.
*Make a clear distinction between deleted and suppressed edits/log
entries.

Co-authored with rxy <git@rxy.jp>

Bug: T207085
Change-Id: Icfa48e366a7e5e3abd5d2155ecfddfc09b378088
2018-10-23 10:53:39 +00:00
db_patches abuse_filter_log table only uses tinyint not int for namespace ID 2014-03-04 02:24:27 +00:00
i18n Localisation updates from https://translatewiki.net. 2018-10-22 22:15:15 +02:00
includes Remove info leak 2018-10-23 10:53:39 +00:00
maintenance Reduce use of globals in favor of Config 2018-05-02 02:27:26 +00:00
modules Open the page for editing warning message in a new tab 2018-10-12 10:40:05 +02:00
tests Merge "Unbreak short circuit for arrays" 2018-10-18 04:04:31 +00:00
.eslintrc.json Convert Special:AbuseFilter/tools to use OOUI 2018-04-02 16:31:19 +02:00
.gitignore Add phan configuration 2018-04-30 08:32:58 +00:00
.gitreview Whoops, track not trace 2016-10-24 17:01:30 -07:00
.phpcs.xml Remove the last PHPCS exclusion 2018-09-03 10:42:30 +02:00
.stylelintrc.json build: Bump devDependencies to latest 2018-02-10 21:00:53 +00:00
AbuseFilter.alias.php Use short array syntax in alias file 2017-06-15 14:30:30 +00:00
abusefilter.tables.pg.sql Fix database schema for PostgreSQL 2018-09-29 12:12:52 +02:00
abusefilter.tables.sql abuse_filter_log table only uses tinyint not int for namespace ID 2014-03-04 02:24:27 +00:00
abusefilter.tables.sqlite.sql Fix SQLite syntax errors 2018-06-26 14:50:57 +02:00
CODE_OF_CONDUCT.md build: Updating mediawiki/phan-taint-check-plugin to 1.4.0 2018-09-01 05:29:54 +00:00
composer.json build: Updating mediawiki/phan-taint-check-plugin to 1.5.0 2018-09-07 06:41:55 +00:00
COPYING Add COPYING 2014-01-22 21:21:10 +00:00
extension.json Allow selecting custom disallow message 2018-10-11 10:35:01 +02:00
Gruntfile.js Move all apihelp translatable messages to separate files 2018-09-21 08:21:38 +00:00
hooks.txt Add aliases for "_text" and "article_" variables 2018-08-21 16:59:56 +02:00
package.json Use pinned npm dev dependency versions 2018-09-04 22:16:32 +00:00