wikimedia/mediawiki-extensions-Scribunto

1964 commits 15 branches 20 tags 30 MiB

Author	SHA1	Message	Date
gerritbot	b7a5e6fadd	Replace some moved Title class uses, now MediaWiki\Title\Title Bug: T321681 Change-Id: I27924141187aef8fe2f6500ec0c4b6360d268c28	2023-08-19 12:22:05 +00:00
Kunal Mehta	0f2585244c	Require CSRF token for action=scribunto-console This is basically unexploitable, given that Scribunto sessions are "extremely ephemeral", protected by a 31-bit non-cryptographically random token and generally contain very little useful data. But, requiring a CSRF token is a best practice and since this module is internal and only used in one place, it's also unlikely to break anything. Because it needs a token, the module is POST-only now too. Bug: T212071 Change-Id: I7fb6b4f856ee6194eb37c26e14f178fea6c0a3f6	2022-10-05 14:38:50 +00:00
Reedy	8e73003fee	Start namespacing extension Change-Id: Ib632434861c2df03dfcddbd195f556c937812196	2022-05-12 01:33:11 +00:00

Author

SHA1

Message

Date

gerritbot

b7a5e6fadd

Replace some moved Title class uses, now MediaWiki\Title\Title

Bug: T321681
Change-Id: I27924141187aef8fe2f6500ec0c4b6360d268c28

2023-08-19 12:22:05 +00:00

Kunal Mehta

0f2585244c

Require CSRF token for action=scribunto-console

This is basically unexploitable, given that Scribunto sessions are
"extremely ephemeral", protected by a 31-bit non-cryptographically
random token and generally contain very little useful data.

But, requiring a CSRF token is a best practice and since this module
is internal and only used in one place, it's also unlikely to break
anything. Because it needs a token, the module is POST-only now too.

Bug: T212071
Change-Id: I7fb6b4f856ee6194eb37c26e14f178fea6c0a3f6

2022-10-05 14:38:50 +00:00

Reedy

8e73003fee

Start namespacing extension

Change-Id: Ib632434861c2df03dfcddbd195f556c937812196

2022-05-12 01:33:11 +00:00

Renamed from includes/common/ApiScribuntoConsole.php (Browse further)

3 commits