"IAlex" posted a comment on MediaWiki.r92924. URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/92924#c32107
Commit summary for MediaWiki.r92924: * Moved email changing from sp:Preferences to new sp:ChangeEmail, which requires confirming the user password. This reduces the impact of session hijacking, which was increased slightly with r86482. Changing a password already required confirming the old one. This change closes the loophole of changing the email address and then doing a reset. * Parse 'mailerror' message correctly IAlex's comment: Fixed in r113710. _______________________________________________ MediaWiki-CodeReview mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview
