From 2f8b7ae67321d8716fd11d9199a661ff3ffae9cc Mon Sep 17 00:00:00 2001 From: Ammarpad Date: Sat, 4 Jun 2022 21:20:48 +0100 Subject: [PATCH] SpecialRandomInCategory: Don't expose edittoken in URL Bug: T309907 Change-Id: I53e58c16cd1292d78b5775358fc180901f4ce203 --- includes/specials/SpecialRandomInCategory.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialRandomInCategory.php b/includes/specials/SpecialRandomInCategory.php index 388df0052e7..a338e701a87 100644 --- a/includes/specials/SpecialRandomInCategory.php +++ b/includes/specials/SpecialRandomInCategory.php @@ -154,7 +154,7 @@ class SpecialRandomInCategory extends FormSpecialPage { return Status::newFatal( $msg ); } - $query = $this->getRequest()->getValues(); + $query = $this->getRequest()->getQueryValues(); unset( $query['title'] ); $this->getOutput()->redirect( $title->getFullURL( $query ) ); }