https://bugzilla.wikimedia.org/show_bug.cgi?id=55846
Web browser: ---
Bug ID: 55846
Summary: Flow doesn't use the standard edit token
Product: MediaWiki extensions
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: Flow
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected],
[email protected]
Classification: Unclassified
Mobile Platform: ---
From Flow.php:
// Salt used to generate edit tokens for authenticating Flow actions
$wgFlowTokenSalt = 'flow';
From includes/api/ApiFlow.php:
public function getTokenSalt() {
global $wgFlowTokenSalt;
return $wgFlowTokenSalt;
}
Why is Flow using a non-standard token? What's the advantage to doing so?
It's a disadvantage to anyone using the API since they need to fetch another
token, and in many cases they already have an edit token.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
