Page MenuHomePhabricator

Check titleblacklist when auto creating accounts
Closed, ResolvedPublic

Description

Currently users can bypass username blacklisting (in MediaWiki:Titleblacklist, [[mw:Extension:Title blacklist]]) by opening an account on another wiki and have an account with the same username via CentralAuth on the wikis where this name is disallowed in titleblacklist.

CentralAuth should check whether the username is allowed on a wiki before creating an account on it for a global user.


Version: unspecified
Severity: normal

Details

Reference
bz22740

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:00 PM
bzimport set Reference to bz22740.
  • This bug has been marked as a duplicate of bug 14629 ***