https://bugzilla.wikimedia.org/show_bug.cgi?id=37643

--- Comment #3 from Brad Jorsch <[email protected]> 2012-08-21 
15:47:04 UTC ---
(In reply to comment #2)
> How is it possible? Anyone trying to edit will get a session.

As described: If you're not logged in, you don't get a session cookie until you
try to perform certain actions. And the steps required to make an edit via the
API do not include any session-creating actions.

I discovered this bug by doing exactly that while testing API captcha support.

At any rate, the gerrit change doesn't hurt anything if there is already a
session active. It just starts a session if there isn't one, which really
should be done by anything that is trying to use the session.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to