wikimedia/mediawiki-extensions-ReplaceText
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/ReplaceText synced 2024-11-27 16:10:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: Check permissions before job execution

Browse source 
CVE-2021-41801

Bug: T279090
Change-Id: Ibc299edf626ca9aa1cd9d83b888820f5aca9af7c
This commit is contained in:
RhinosF1 2021-04-21 14:16:18 -05:00 committed by Reedy
parent 9739ecb325
commit d4687e125f
2 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
extension.json
View file

@ -1,6 +1,6 @@
{
"name": "Replace Text",
"version": "1.4.1",
"version": "1.4.2",
"author": [
"Yaron Koren",
"Niklas Laxström",

8
src/ReplaceTextJob.php
View file

@ -41,6 +41,14 @@ class ReplaceTextJob extends Job {
* @return bool success
*/
function run() {
// T279090
$current_user = User::newFromId( $this->params['user_id'] );
if ( !$this->title->userCan( 'replacetext', $current_user ) ) {
$this->error = 'replacetext: permission no longer valid';
// T279090#6978214
return true;
}
if ( isset( $this->params['session'] ) ) {
$callback = RequestContext::importScopedSession( $this->params['session'] );
$this->addTeardownCallback( function () use ( &$callback ) {