https://bugzilla.wikimedia.org/show_bug.cgi?id=60242

       Web browser: ---
            Bug ID: 60242
           Summary: Renameuser does not properly sanitize/canonicalize old
                    username in rename form
           Product: MediaWiki extensions
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: Renameuser
          Assignee: wikibugs-l@lists.wikimedia.org
          Reporter: matma....@gmail.com
                CC: agarr...@wikimedia.org, aschulz4...@gmail.com,
                    bjor...@wikimedia.org, cste...@wikimedia.org,
                    vasi...@gmail.com, wikimedia.b...@snowolf.eu
    Classification: Unclassified
   Mobile Platform: ---

Renameuser does not properly sanitize/canonicalize old username in rename form.

It is possible to provide a string that is an invalid username that can be
canonicalized to a valid one (e.g. "Test  user" with two spaces), which will
trigger a "The user does not exist." error even if the account "Test user" does
exist.

(There is a separate process of uppercasing the first letter of the provided
username; the RenameUserWarning hook can receive the lowercase username before
it is adjusted. This might be a separate bug too.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to