John Erling Blad has submitted this change and it was merged.

Change subject: Prevent direct editing of structured content.
......................................................................


Prevent direct editing of structured content.

This patch prevents the use of the API's edit action on
any content in the entity namespace to avoid text-level manipulation
of the JSON content. This also prevents content of the wrong type
in entity namespaces.

Once I37b0e42e is merged, this patch also prevents entities
to be saved to other namespaces than their own.

Change-Id: I4d554f4e35ef4a5fa3bb2051ea0001480ace0ca2
---
M repo/Wikibase.hooks.php
M repo/Wikibase.i18n.php
M repo/Wikibase.php
M repo/includes/content/EntityHandler.php
M repo/tests/phpunit/includes/api/ApiEditPageTest.php
M repo/tests/phpunit/includes/content/EntityHandlerTest.php
6 files changed, 136 insertions(+), 80 deletions(-)

Approvals:
  John Erling Blad: Verified; Looks good to me, approved


--
To view, visit https://gerrit.wikimedia.org/r/23413
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I4d554f4e35ef4a5fa3bb2051ea0001480ace0ca2
Gerrit-PatchSet: 3
Gerrit-Project: mediawiki/extensions/Wikibase
Gerrit-Branch: master
Gerrit-Owner: Daniel Kinzler <[email protected]>
Gerrit-Reviewer: Aude <[email protected]>
Gerrit-Reviewer: Daniel Kinzler <[email protected]>
Gerrit-Reviewer: Daniel Werner <[email protected]>
Gerrit-Reviewer: Jeroen De Dauw <[email protected]>
Gerrit-Reviewer: John Erling Blad <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to