Last modified: 2012-12-12 16:34:31 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T44627, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 42627 - Placeholder for bugs related to security audit of CLIENT
Placeholder for bugs related to security audit of CLIENT
Status: VERIFIED FIXED
Product: MediaWiki extensions
Classification: Unclassified
WikidataClient (Other open bugs)
unspecified
All All
: Highest major (vote)
: ---
Assigned To: jeblad
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-12-02 16:18 UTC by jeblad
Modified: 2012-12-12 16:34 UTC (History)
7 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description jeblad 2012-12-02 16:18:24 UTC
Can't find the correct bug, using this as a placeholder for now.

There are several bugs reported in an email. This lists the issues and fixes
for the client.


./client/includes/store/sql/SiteLinkRemoteTable.php
* Please intval $item->getId()->getNumericId() before concating into
sql Line 108
Comment 1 jeblad 2012-12-02 16:32:14 UTC
Change I67cb1ba9: Added casts to numeric id in EntityId

The call to getNumericId() should not be able to return anything except an integer.
Comment 2 Andre Klapper 2012-12-03 10:04:09 UTC
jeblad: I don't understand what is meant by "Can't find the correct bug, using this as a placeholder for now". That there should be a bug report already? 
If so, it might be in the "Security" product instead.
Comment 3 abraham.taherivand 2012-12-12 16:34:31 UTC
Verified in Wikidata demo sprint 26

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links