mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/Echo
synced 2024-11-23 23:44:53 +00:00
11b9e66f9f
Why: * Echo stores agents by their user id or by the name if the user is not registered. This works for IPs since the "event_agent_ip" field has limit of 39 bytes (32× [0-9A-F] + 7× colon for IPv6). * However, it's possible to hold a user identity that is not an IP address, but the user name has not been or cannot be registered (e.g., external users). Echo wouldn't validate this and would attempt to insert the user name into "event_agent_ip", possibly causing silent truncation and data corruption. What: * Do not let events with such agents be saved. For now, log an error in the production. Wikibase, the only known source of this problem, has already been fixed. * In runtime, replace every possibly corrupted user name with a placeholder to avoid unexpected null values and exceptions in production. Bug: T367638 Change-Id: Ic2bd218b10651d13da9e9aea54dd2d668a33d946 Depends-On: I03b4367355dc5a3fc0c14aad5fdf19fbcd0caa3d Depends-On: I92eb93983e81708b289e9f7d837884d539dade0b |
||
|---|---|---|
| .. | ||
| AbstractEntity.php | ||
| Event.php | ||
| Notification.php | ||
| TargetPage.php | ||