Addshore has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/344352 )
Change subject: Fix form submit token check
......................................................................
Fix form submit token check
Change-Id: I6bb7c76009ceaa76fcf29b9fb3b59cf622f52ea5
---
M src/SpecialImportFile.php
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/mediawiki/extensions/FileImporter
refs/changes/52/344352/1
diff --git a/src/SpecialImportFile.php b/src/SpecialImportFile.php
index e30a67d..66184fb 100644
--- a/src/SpecialImportFile.php
+++ b/src/SpecialImportFile.php
@@ -110,7 +110,7 @@
$importDetailsHash = $out->getRequest()->getVal(
'importDetailsHash', '' );
$token = $out->getRequest()->getVal( 'token', '' );
- if ( $this->getUser()->getEditToken() !== $token ) {
+ if ( !$this->getUser()->matchEditToken( $token ) ) {
$this->showWarningMessage( 'Incorrect token submitted
for import' ); // TODO i18n
return false;
}
--
To view, visit https://gerrit.wikimedia.org/r/344352
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I6bb7c76009ceaa76fcf29b9fb3b59cf622f52ea5
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/extensions/FileImporter
Gerrit-Branch: master
Gerrit-Owner: Addshore <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
