https://bugzilla.wikimedia.org/show_bug.cgi?id=22740

           Summary: Check titleblacklist when auto creating accounts
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: CentralAuth
        AssignedTo: vasi...@gmail.com
        ReportedBy: liang...@gmail.com
                CC: agarr...@wikimedia.org


Currently users can bypass username blacklisting (in MediaWiki:Titleblacklist,
[[mw:Extension:Title blacklist]]) by opening an account on another wiki and
have an account with the same username via CentralAuth on the wikis where this
name is disallowed in titleblacklist.

CentralAuth should check whether the username is allowed on a wiki before
creating an account on it for a global user.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to