It has been reported on Wikipedia that MediaWiki does not prevent the creation of users with usernames that could be potentially valid IPv6 addresses, and that MediaWiki treats 2001:db8 like 2001:db8::. Furthermore, MediaWiki does not effectively deal with usernames which already are potentially valid IPv6 addresses.
Version: 1.24rc
Severity: major
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Disallow usernames that look like IPv6 addresses | mediawiki/core | master | +128 -49 |
| Title | Reference | Author | Source Branch | Dest Branch | |
|---|---|---|---|---|---|
| maintain-kubeusers: bump service quota for wikibugs | repos/cloud/toolforge/toolforge-deploy!210 | bd808 | work/bd808/T358538 | main |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T37540 Enable full IPv6 support on Wikimedia wikis | |||
| Open | BUG REPORT | None | T35853 Can register usernames that could be potentially valid IPv6 addresses | ||
| Open | None | T39884 Do not allow usernames which look like IPv6 addresses |
I've tested 1.19 and can't seem to create IPv6 usernames.
Current IPv6 names must be migrated, which will be easier when bug 31863 is fixed.
I created a user named 8000:63bf:3fff:fdd2:
on mediawiki.org today so I guess this ticket is still valid.
Change 12782 had a related patch set uploaded (by Winston Sung; author: Platonides):
[mediawiki/core@master] Disallow usernames that look like IPv6 addresses