Merge "Prevent new accounts from using = in their usernames"

RELEASE-NOTES-1.40

@@ -41,6 +41,9 @@ For notes on 1.39.x and older releases, see HISTORY.
   length from 1 to 8 characters. The initial limit of 1 has been in place since
   MediaWiki 1.26. If you wish to allow shorter passwords, you can over-ride it
   in your LocalSettings following the guidance on MediaWiki.org.
+* (T254045) New accounts can no longer use an equals sign (=) in their
+  usernames because of issues it causes in wikitext syntax. This can be
+  adjusted by changing the value of $wgInvalidUsernameCharacters.
 * …
 
 ==== Removed configuration ====

docs/config-schema.yaml

@@ -4659,7 +4659,7 @@ config-schema:
         type: array
         description: 'An array of preferences to not show for the user'
     InvalidUsernameCharacters:
-        default: '@:>'
+        default: '@:>='
         description: |-
             Characters to prevent during new account creations.
             This is used in a regular expression character class during

includes/MainConfigSchema.php

@@ -7333,7 +7333,7 @@ class MainConfigSchema {
 	 * registration (regex metacharacters like / are escaped).
 	 */
 	public const InvalidUsernameCharacters = [
-		'default' => '@:>',
+		'default' => '@:>=',
 	];
 
 	/**

includes/config-schema.php

@@ -1077,7 +1077,7 @@ return [
 			],
 			'HiddenPrefs' => [
 			],
-			'InvalidUsernameCharacters' => '@:>',
+			'InvalidUsernameCharacters' => '@:>=',
 			'UserrightsInterwikiDelimiter' => '@',
 			'SecureLogin' => false,
 			'AuthenticationTokenVersion' => null,