https://bugzilla.wikimedia.org/show_bug.cgi?id=44202
Web browser: ---
Bug ID: 44202
Summary: Account creation through API leaks account creator's
IP address
Product: MediaWiki
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: major
Priority: Unprioritized
Component: API
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected],
[email protected], [email protected],
[email protected], [email protected]
Classification: Unclassified
Mobile Platform: ---
When creating an account through the API from an anonymous user, its IP address
is publicly accessible the new users log as action performer. In such case, it
contains entries like this:
User account TestApiCreate (Talk | contribs | block) was created by ::1 (Talk |
block)
It should be instead:
User account TestApiCreate (Talk | contribs | block) was created
and the user itself should be logged as action performer.
A patch will come soon to fix this.
--
You are receiving this mail because:
You are on the CC list for the bug.
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
