https://bugzilla.wikimedia.org/show_bug.cgi?id=20099
Summary: CSRF possible with Special:UsabilityInitiativeOptIn
Product: MediaWiki extensions
Version: any
Platform: All
URL: http://en.wikipedia.org/wiki/User:Nakon/mw
OS/Version: All
Status: NEW
Severity: minor
Priority: Normal
Component: UsabilityInitiative
AssignedTo: [email protected]
ReportedBy: [email protected]
CC: [email protected]
It is possible to automatically opt a user in to the beta without their
knowledge. If the img tag in the link above is placed on a page and a
logged-in user visits the page, they will automatically be opted-in to the beta
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
