https://bugzilla.wikimedia.org/show_bug.cgi?id=33388

       Web browser: ---
             Bug #: 33388
           Summary: use an own token for preferences
           Product: MediaWiki
           Version: 1.18.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: User preferences
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]
    Classification: Unclassified


At the moment, you can change the preferences from each page with javascript:

$.post( '/wiki/Special:Preferences', { 'wpEditToken':
mw.user.tokens.get('editToken'), 'wprcdays': 21 } );

Is this intended? Maybe it is better to use an own token for Preferences and
not the edit token, to avoid this. Please close as WONTFIX, when all is right.
Thanks.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to