Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
wiki.techinc.nl/includes/api
History
Brad Jorsch 8a00ddbf35 SECURITY: Rate limit moves via the API 
While rate limiting has been applied to moves via the web UI since rate
limiting was first added, it appears that it was overlooked when ApiMove
was created.

This follows the same model as is followed by the web UI: each
submission to ApiMove is one "hit" for the rate limiter, even though
that submission might result in multiple pages being moved (e.g. the
page, its talk page, and its subpages) depending on the options and user
rights.

Bug: T132874
Change-Id: I564d8bfcc7dd3ad6d92dbbc33519a589697c0d4e

Signed-off-by: Chad Horohoe <chadh@wikimedia.org>
2016-05-20 09:49:33 -07:00
..
i18n Localisation updates from https://translatewiki.net. 2016-05-19 21:57:18 +02:00
ApiAMCreateAccount.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiAuthManagerHelper.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiBase.php API: Add "standard" header and hook for lacksSameOriginSecurity() 2016-05-20 09:25:14 -07:00
ApiBlock.php Convert remaining array() to [] in API 2016-02-29 22:51:36 +00:00
ApiChangeAuthenticationData.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiCheckToken.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiClearHasMsg.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiClientLogin.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiComparePages.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiContinuationManager.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiCreateAccount.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiDelete.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiDisabled.php
ApiEditPage.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00
ApiEmailUser.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiErrorFormatter.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiExpandTemplates.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00
ApiFeedContributions.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00
ApiFeedRecentChanges.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiFeedWatchlist.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiFileRevert.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiFormatBase.php Explicitly declare ApiFormatBase::initPrinter public 2016-03-08 16:11:31 +00:00
ApiFormatFeedWrapper.php API: Finish killing "raw mode" 2015-09-17 13:51:45 +00:00
ApiFormatJson.php SECURITY: Improve cross-domain-policy mangling 2016-05-20 09:48:11 -07:00
ApiFormatNone.php
ApiFormatPhp.php SECURITY: Improve cross-domain-policy mangling 2016-05-20 09:48:11 -07:00
ApiFormatRaw.php Remove various double empty newlines 2015-12-27 18:55:12 +00:00
ApiFormatXml.php Explicitly declare ApiFormatXml::addXslt() protected 2016-03-08 16:12:26 +00:00
ApiHelp.php Set explicit direction to ApiHelp headers with module names 2016-04-29 18:06:38 +03:00
ApiHelpParamValueMessage.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiImageRotate.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00
ApiImport.php Explicitly declare ApiImport::getData() public 2016-03-08 16:14:22 +00:00
ApiLinkAccount.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiLogin.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiLogout.php Allow API action=logout with BotPasswords 2016-03-01 02:26:45 +00:00
ApiMain.php API: Add "standard" header and hook for lacksSameOriginSecurity() 2016-05-20 09:25:14 -07:00
ApiManageTags.php Split off permission to delete tags from managechangetags permission 2016-05-12 21:11:04 +00:00
ApiMergeHistory.php Remove some unused variables 2016-02-20 20:22:56 +00:00
ApiMessage.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiModuleManager.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiMove.php SECURITY: Rate limit moves via the API 2016-05-20 09:49:33 -07:00
ApiOpenSearch.php Convert SearchEngine to service containers 2016-04-25 16:25:17 -07:00
ApiOptions.php ApiOptions: set form field parent earlier 2016-05-04 17:09:18 +02:00
ApiPageSet.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiParamInfo.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiParse.php Merge "Use single quotes in API where possible" 2016-03-08 17:03:24 +00:00
ApiPatrol.php Add tags support to patrol, protect, unblock, and undelete 2016-02-29 16:59:31 -05:00
ApiProtect.php Add tags support to patrol, protect, unblock, and undelete 2016-02-29 16:59:31 -05:00
ApiPurge.php Add RecursiveLinkPurge log for API requests 2016-03-15 21:39:40 +00:00
ApiQuery.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiQueryAllCategories.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllDeletedRevisions.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllImages.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllLinks.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiQueryAllMessages.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllPages.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllRevisions.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAllUsers.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryAuthManagerInfo.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiQueryBacklinks.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiQueryBacklinksprop.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiQueryBase.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryBlocks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryCategories.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryCategoryInfo.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryCategoryMembers.php Use hex2bin() instead of pack() 2016-02-20 00:27:24 -05:00
ApiQueryContributors.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryDeletedRevisions.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryDeletedrevs.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryDisabled.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryDuplicateFiles.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryExternalLinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryExtLinksUsage.php API: Normalize input URL in ApiQueryExtLinksUsage 2016-03-26 18:14:43 -04:00
ApiQueryFilearchive.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryFileRepoInfo.php Replace uses of join() by implode() 2016-03-08 18:24:16 +00:00
ApiQueryGeneratorBase.php Move ApiQueryGeneratorBase to it's own file 2015-12-20 14:39:37 +00:00
ApiQueryImageInfo.php Fix and standardize Doxygen tags 2016-04-30 12:10:17 +02:00
ApiQueryImages.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryInfo.php Remove WatchedItemStore::getDefaultInstance 2016-05-06 08:47:37 +00:00
ApiQueryIWBacklinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryIWLinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryLangBacklinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryLangLinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryLinks.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryLogEvents.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryMyStashedFiles.php Remove some unused variables 2016-02-20 20:22:56 +00:00
ApiQueryPagePropNames.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryPageProps.php Remove some unused variables 2016-02-20 20:22:56 +00:00
ApiQueryPagesWithProp.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryPrefixSearch.php Convert SearchEngine to service containers 2016-04-25 16:25:17 -07:00
ApiQueryProtectedTitles.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryQueryPage.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryRandom.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryRecentChanges.php Correct error message for missing permission to get patrol information 2016-05-02 22:03:47 +00:00
ApiQueryRevisions.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryRevisionsBase.php Merge "Use single quotes in API where possible" 2016-03-08 17:03:24 +00:00
ApiQuerySearch.php Convert SearchEngine to service containers 2016-04-25 16:25:17 -07:00
ApiQuerySiteinfo.php API: Handle shorthand "all groups" configuration in ApiQuerySiteInfo 2016-05-19 18:53:57 +00:00
ApiQueryStashImageInfo.php ApiQueryStashImageInfo: Don't throw exceptions when the user is not logged in 2016-03-18 16:22:58 +01:00
ApiQueryTags.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryTokens.php Change \\ to \ in phpdoc 2016-04-08 17:46:30 +00:00
ApiQueryUserContributions.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiQueryUserInfo.php Remove WatchedItemStore::getDefaultInstance 2016-05-06 08:47:37 +00:00
ApiQueryUsers.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiQueryWatchlist.php ApiQueryWatchlist: wlshow=unread should filter revisions, not pages 2016-02-17 15:50:35 +00:00
ApiQueryWatchlistRaw.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiRemoveAuthenticationData.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiResetPassword.php API changes for AuthManager 2016-05-16 15:12:52 +00:00
ApiResult.php Always use 'bool' instead of 'boolean' in Doxygen tags 2016-03-24 09:44:09 +01:00
ApiRevisionDelete.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiRollback.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiRsd.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiSerializable.php API: Overhaul ApiResult, make format=xml not throw, and add json formatversion 2015-04-10 16:57:15 -04:00
ApiSetNotificationTimestamp.php Use WIS::getNotificationTimestampsBatch in ApiSetNotifTimestamp 2016-05-18 12:09:29 +01:00
ApiStashEdit.php Improve edit stash hit rate for logged-out users 2016-05-17 19:04:42 +00:00
ApiTag.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiTokens.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00
ApiUnblock.php Add tags support to patrol, protect, unblock, and undelete 2016-02-29 16:59:31 -05:00
ApiUndelete.php Add tags support to patrol, protect, unblock, and undelete 2016-02-29 16:59:31 -05:00
ApiUpload.php Check if user is blocked during upload process 2016-05-03 13:23:44 +00:00
ApiUserrights.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
ApiWatch.php Use single quotes in API where possible 2016-03-08 17:27:00 +01:00