https://bugzilla.wikimedia.org/show_bug.cgi?id=67248

            Bug ID: 67248
           Summary: Make sure, the given token is used for the function
           Product: MediaWiki extensions
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: Unprioritized
         Component: GoogleLogin
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]
       Web browser: ---
   Mobile Platform: ---

Actually, if you change the action in form (maybe form to unlink google and
wiki account) to /Create you can create a new User account, also when you are
logged in and the google id is linked to another account (the Google id is
still linked to the "old" account, so no account compromise).

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to