NotKlea changed the subtype of this task from "Bug Report" to "Security Issue".
NotKlea added a comment.


  Modified as security issue since i believe this is a security issue? since 
even tho it's public code, it will attempt to do http requests on some 
ocassions, which could leak private data, even if it's just leaking the edit 
token and not the cookies?
  
  See 
https://gerrit.wikimedia.org/g/pywikibot/core/+/54f96359353052a5af83cba56d12bdcb6f632a2e/pywikibot/data/api/_requests.py?&useskin=vector#698

TASK DETAIL
  https://phabricator.wikimedia.org/T413417

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

_______________________________________________
pywikibot-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to