jenkins-bot has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/344352 )

Change subject: Fix form submit token check
......................................................................


Fix form submit token check

Change-Id: I6bb7c76009ceaa76fcf29b9fb3b59cf622f52ea5
---
M src/SpecialImportFile.php
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  WMDE-Fisch: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/src/SpecialImportFile.php b/src/SpecialImportFile.php
index eab9f52..4a384a6 100644
--- a/src/SpecialImportFile.php
+++ b/src/SpecialImportFile.php
@@ -110,7 +110,7 @@
                $importDetailsHash = $out->getRequest()->getVal( 
'importDetailsHash', '' );
                $token = $out->getRequest()->getVal( 'token', '' );
 
-               if ( $this->getUser()->getEditToken() !== $token ) {
+               if ( !$this->getUser()->matchEditToken( $token ) ) {
                        $this->showWarningMessage( 'Incorrect token submitted 
for import' ); // TODO i18n
                        return false;
                }

-- 
To view, visit https://gerrit.wikimedia.org/r/344352
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I6bb7c76009ceaa76fcf29b9fb3b59cf622f52ea5
Gerrit-PatchSet: 4
Gerrit-Project: mediawiki/extensions/FileImporter
Gerrit-Branch: master
Gerrit-Owner: Addshore <[email protected]>
Gerrit-Reviewer: Addshore <[email protected]>
Gerrit-Reviewer: Andrew-WMDE <[email protected]>
Gerrit-Reviewer: Tobias Gritschacher <[email protected]>
Gerrit-Reviewer: WMDE-Fisch <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to