Page MenuHomePhabricator
Create Task
Maniphest T38213

[CSRF] Special:MobileOptions/DisableImages needs token
Closed, ResolvedPublic
Actions

Description

The current image disabling action is: https://en.m.wikipedia.org/w/index.php?title=Special:MobileOptions/DisableImages which suffers CSRF.

Version: unspecified
Severity: normal

Details

Reference
bz36213

Event Timeline

• bzimport raised the priority of this task from to Medium.Nov 22 2014, 12:22 AM
• bzimport added a project: MobileFrontend-stable.
• bzimport set Reference to bz36213.
• bzimport added a subscriber: Unknown Object (MLST).
liangent created this task.Apr 24 2012, 9:56 AM
• bzimport added a comment.Apr 24 2012, 8:48 PM

preilly wrote:

(In reply to comment #0)

The current image disabling action is:
https://en.m.wikipedia.org/w/index.php?title=Special:MobileOptions/DisableImages
which suffers CSRF.

Fixed committed in Change Ic6ebe2cb:: https://gerrit.wikimedia.org/r/#change,5771

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL