Current configuration on the wiki
Find a file
Máté Szabó 784b9c4dc4 permissions: Avoid potential infinite loop if BlockDisablesLogin = true
Why:

- PermissionManager::getUserPermissions() checks whether the user is
  blocked if $wgBlockDisablesLogin = true, so that it can then limit
  user's permissions to the set of permissions assigned to unregistered
  users if so.
- This causes the GetUserBlock hook to run, which may itself check
  permissions on the user (e.g. in the GlobalBlocking extension),
  causing an infinite loop.
- Since the decision whether the user is blocked isn't yet final by the
  time GetUserBlock runs, any permission checks triggered by
  GetUserBlock handlers should see the user's full set of permissions.

What:

- Stash the user's permissions in PermissionManager's in-memory cache
  before running block checks if BlockDisablesLogin = true.
- Add tests.

Bug: T384197
Change-Id: I3e3804fe518627e9edc2b574cce88f533fd93fe4
(cherry picked from commit 27062b9f8752cc853a65e8a46c9d7d1a9af32c48)
2025-03-13 00:45:18 +00:00
.phan Introduce minimal OTEL tracing library 2024-10-09 15:55:31 +02:00
cache Update Apache config syntax in .htaccess files 2024-03-23 23:36:31 -04:00
docs DnsBlacklistUrls: Remove sorbs.net 2025-01-06 22:57:01 +00:00
extensions Update git submodules 2025-03-12 21:31:19 +00:00
images Set "X-Content-Type-Options: nosniff" header in images/.htaccess 2023-02-24 23:59:22 -05:00
includes permissions: Avoid potential infinite loop if BlockDisablesLogin = true 2025-03-13 00:45:18 +00:00
languages Localisation updates from https://translatewiki.net. 2025-03-11 06:32:45 +01:00
maintenance initEditCount: Join from user to actor to revision 2025-03-03 15:32:50 +00:00
mw-config installer: Fix class name in example override 2025-01-25 15:07:10 +00:00
resources Commit swagger-ui's NOTICE 2025-01-15 16:09:22 +00:00
skins Update git submodules 2025-03-11 06:27:22 +00:00
tests permissions: Avoid potential infinite loop if BlockDisablesLogin = true 2025-03-13 00:45:18 +00:00
vendor@5c32a1321d Update git submodules 2025-03-06 17:26:23 +00:00
.dockerignore
.editorconfig Fix .editorconfig for tests/parser/ directory 2024-02-27 17:35:16 +01:00
.eslintignore REST: validate JSON in tests 2024-09-20 15:42:32 +00:00
.eslintrc.json eslint: Only apply client rules to client files 2022-02-09 02:40:11 +00:00
.fresnel.yml
.git-blame-ignore-revs Add .git-blame-ignore-revs 2024-06-02 23:03:04 +02:00
.gitattributes .gitattributes: Ship docker-compose.yml to the tarball 2022-11-30 09:37:13 -05:00
.gitignore Branch commit for REL1_43 2024-10-22 12:47:33 -04:00
.gitmessage git: Introduce .gitmessage 2023-05-21 14:20:31 +03:00
.gitmodules Branch commit for REL1_43 2024-10-22 12:47:33 -04:00
.gitreview
.mailmap build: De-duplicate two recent CREDITS additions via mailmap 2024-09-11 10:02:02 -07:00
.phpcs.xml build: Use inline ignore for MediaWiki.Usage.DeprecatedGlobalVariables 2024-09-26 18:15:32 +00:00
.stylelintrc.json Login page: Use Codex CSS components 2023-07-06 17:20:17 -07:00
.svgo.config.js build: Update SVGO to v3.0.2 2023-06-15 12:24:22 -07:00
.vsls.json build: Upgrade eslint-config-wikimedia from 0.22.1 to 0.24.0 2023-02-07 10:17:30 -05:00
api.php Namespace includes/context 2024-02-08 11:07:01 -05:00
autoload.php Remove CryptHKDF and MWCryptHKDF 2024-11-10 22:49:37 -05:00
CODE_OF_CONDUCT.md
composer.json Update wikimedia/parsoid to 0.20.2 2025-03-05 22:40:24 -05:00
composer.local.json-sample composer.local.json-sample: merge */composer.json 2022-02-07 16:24:23 +01:00
COPYING
CREDITS build: De-duplicate two recent CREDITS additions via mailmap 2024-09-11 10:02:02 -07:00
DEVELOPERS.md Codex: Allow a local development version to be used 2024-08-22 17:20:24 -07:00
docker-compose.yml dev(docker): Bump mediawiki-web container to dev/bookworm-apache2:1.0.1 2025-01-07 17:02:36 +00:00
FAQ
Gruntfile.js Merge "codex: Provide i18n function and messages" 2024-07-03 07:06:47 +00:00
HISTORY HISTORY: Add point releases 2024-10-01 02:21:50 +01:00
img_auth.php filerepo: extract AuthenticatedFileEntryPoint from img_auth.php 2024-05-16 13:22:00 +02:00
index.php Namespace includes/context 2024-02-08 11:07:01 -05:00
INSTALL Move ext-openssl from suggest to require 2024-05-05 09:42:06 +00:00
jsdoc.json Update jsdoc-wmf-theme from 1.0.1 to 1.1.0 2024-06-27 19:29:24 +00:00
load.php ResourceLoader: Follow-up creation of ResourceLoaderEntryPoint 2024-02-22 22:30:39 +00:00
opensearch_desc.php Replace direct use of $wgRestPath with wfScript() 2024-07-01 22:01:32 +00:00
package-lock.json build: Updating npm dependencies 2025-01-06 08:38:45 -05:00
package.json Merge "Update Codex from v1.13.1 to v1.14.0" 2024-10-16 17:26:41 +00:00
phpunit.xml.dist phpunit: Determine what extensions to load in unit tests via config 2023-09-25 23:03:48 +00:00
README.md docs: Link to "Local development quickstart" in README 2024-01-22 13:58:11 +00:00
RELEASE-NOTES-1.43 RELEASE-NOTES-1.43: Add final count for namespacing effort 2025-01-07 21:06:24 +00:00
rest.php Use namespaced classes (1) 2024-06-16 20:18:23 +02:00
SECURITY
thumb.php Use namespaced classes (1) 2024-06-16 20:18:23 +02:00
thumb_handler.php Use namespaced classes (1) 2024-06-16 20:18:23 +02:00
UPGRADE UPGRADE: Update mailing list archive link 2024-04-14 21:36:52 +03:00

MediaWiki

MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. MediaWiki is localised in over 350 languages and its reliability and robust feature set have earned it a large and vibrant community of third-party users and developers.

MediaWiki is:

  • feature-rich and extensible, both on-wiki and with hundreds of extensions;
  • scalable and suitable for both small and large sites;
  • simple to install, working on most hardware/software combinations; and
  • available in your language.

For system requirements, installation, and upgrade details, see the files RELEASE-NOTES, INSTALL, and UPGRADE.

MediaWiki is the result of global collaboration and cooperation. The CREDITS file lists technical contributors to the project. The COPYING file explains MediaWiki's copyright and license (GNU General Public License, version 2 or later). Many thanks to the Wikimedia community for testing and suggestions.