Last modified: 2014-07-01 16:37:49 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T69248, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 67248 - Make sure, the given token is used for the function


Summary:	Make sure, the given token is used for the function

Status:	RESOLVED FIXED

Product:	MediaWiki extensions
Classification:	Unclassified
Component:	GoogleLogin (Other open bugs)
Version:	master
Hardware:	All All

Importance:	Unprioritized major (vote)
Target Milestone:	---
Assigned To:	Nobody - You can work on this!

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2014-06-28 14:59 UTC by Florian
Modified:	2014-07-01 16:37 UTC (History)
CC List:	1 user (show)

See Also:
Web browser:	---
Mobile Platform:	---
Assignee Huggle Beta Tester:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Florian 2014-06-28 14:59:47 UTC

Actually, if you change the action in form (maybe form to unlink google and wiki account) to /Create you can create a new User account, also when you are logged in and the google id is linked to another account (the Google id is still linked to the "old" account, so no account compromise).

Comment 1 Gerrit Notification Bot 2014-06-28 15:19:00 UTC

Change 142807 had a related patch set uploaded by Florianschmidtwelzow:
Disallow creation of wiki account if Google id already connected

https://gerrit.wikimedia.org/r/142807

Comment 2 Gerrit Notification Bot 2014-06-28 17:49:04 UTC

Change 142807 merged by jenkins-bot:
Disallow creation of wiki account if Google id already connected

https://gerrit.wikimedia.org/r/142807

Wikimedia Bugzilla is closed!

Search

Personal tools

Navigation

Links