https://bugzilla.wikimedia.org/show_bug.cgi?id=64409
Dan Garry <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #4 from Dan Garry <[email protected]> --- We've got three totally different behaviours on four platforms here: 1) Desktop: Refuses to create username because it has a hash in it. 2) iOS: Lets you create the username, but silently truncates everything including and after the hash, then fails to log you in saying that you provided an illegal username. 3) Android and Mobile Web: Lets your create the username, but silently truncates everything including and after the hash, then logs you in successfully to the truncated username. If desktop doesn't let you create these usernames then neither should any of our mobile platforms. I'm unclear what the correct engineering solution is though. Do we change the API used to create accounts to error if you try to include hashes (instead of silently truncating and creating), or do we just include client-side validation? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
