Tim Starling 71df9ed5b2 SECURITY: Fix leak of hidden usernames via autoblocks of those users ... CVE-2025-6927 In BlockListPager, restore the bl_deleted=0 condition removed in the previous commit. Add tests. Bug: T397595 Change-Id: I5471fe615d222b936c6668bf3089dd8b5931cc75		2025-06-30 21:25:48 +01:00
..
Contribute	Use typed properties in Contribute classes and add GPL license header	2024-10-19 14:37:58 +02:00
exception
formfields	Licenses: Use typed properties	2024-10-19 13:04:13 +00:00
forms	Use namespaced classes	2024-10-21 20:41:20 +02:00
helpers	License: Use typed properties	2024-10-19 15:46:09 +00:00
Hook	WhatLinksHere: Allow extensible filters	2024-10-21 14:27:53 +05:30
pagers	SECURITY: Fix leak of hidden usernames via autoblocks of those users	2025-06-30 21:25:48 +01:00
redirects	specials: SpecialTalkPage: Use config from request context	2025-06-28 15:11:13 +00:00
SpecialActiveUsers.php
SpecialAllMessages.php
SpecialAllPages.php	specials: Avoid passing null to str_replace()	2024-10-23 16:19:25 +00:00
SpecialAncientPages.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialApiHelp.php	Add namespace to includes/api classes	2024-09-25 19:31:14 +00:00
SpecialApiSandbox.php
SpecialAuthenticationPopupSuccess.php
SpecialAutoblockList.php
SpecialBlankpage.php
SpecialBlock.php	Merge "Make Message and MessageValue compatible"	2024-10-21 15:38:56 +00:00
SpecialBlockList.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialBookSources.php
SpecialBotPasswords.php
SpecialBrokenRedirects.php	Improve BrokenRedirects display	2025-06-03 20:52:50 +00:00
SpecialCategories.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialChangeContentModel.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialChangeCredentials.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialChangeEmail.php	Send temporary accounts to Special:CreateAccount on ::requireNamed	2024-09-24 21:42:17 +00:00
SpecialChangePassword.php
SpecialComparePages.php
SpecialConfirmEmail.php	Add namespace to IDBAccessObject and DBAccessObjectUtils	2024-09-27 16:19:10 -04:00
SpecialContribute.php
SpecialContributions.php	Indicate IP contributions are legacy when temporary accounts enabled	2024-08-30 16:22:13 +01:00
SpecialCreateAccount.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialDeadendPages.php
SpecialDeletedContributions.php	specials: Do not allow transclusion of Special:DeletedContributions	2024-10-31 20:08:49 +00:00
SpecialDeletePage.php
SpecialDiff.php
SpecialDoubleRedirects.php	Use content dir in DoubleRedirects and ShortPages special pages	2024-10-08 09:05:56 +00:00
SpecialEditPage.php
SpecialEditRecovery.php
SpecialEditTags.php
SpecialEditWatchlist.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialEmailInvalidate.php	Add namespace to IDBAccessObject and DBAccessObjectUtils	2024-09-27 16:19:10 -04:00
SpecialEmailUser.php
SpecialExpandTemplates.php	Namespace all remaining classes in includes/parser	2024-10-15 23:54:32 +01:00
SpecialExport.php	SpecialExport: Prevent passing null to strtolower	2024-09-21 14:55:36 +00:00
SpecialFewestRevisions.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialFileDuplicateSearch.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialFilepath.php
SpecialGoToInterwiki.php
SpecialImport.php
SpecialJavaScriptTest.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialLinkAccounts.php	Remove unchecked exception annotations	2024-09-17 22:20:58 +02:00
SpecialLinkSearch.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialListDuplicatedFiles.php
SpecialListFiles.php
SpecialListGrants.php
SpecialListGroupRights.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialListRedirects.php	Use HTML markup instead of bidi control chars in Special:ListRedirects	2024-10-03 22:06:29 +03:30
SpecialListUsers.php
SpecialLockdb.php
SpecialLog.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialLonelyPages.php
SpecialLongPages.php
SpecialMediaStatistics.php	Add namespace to remaining parts of Wikimedia\Mime and Wikimedia\Stats	2024-09-27 16:19:10 -04:00
SpecialMergeHistory.php	WebRequest: Add PHP return type hint for getRawVal	2024-10-10 14:01:26 +00:00
SpecialMIMESearch.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialMostCategories.php
SpecialMostImages.php
SpecialMostInterwikis.php
SpecialMostLinked.php
SpecialMostLinkedCategories.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialMostLinkedTemplates.php
SpecialMostRevisions.php
SpecialMovePage.php	MovePage, MergeHistory: Suppress redirect for "MediaWiki:"-ns wikitext pages	2024-10-03 18:06:42 +00:00
SpecialMute.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialMyLanguage.php
SpecialNamespaceInfo.php	Use getContentLanguage() in two special pages instead of injection	2024-10-05 20:08:43 +03:30
SpecialNewFiles.php	Add namespace to remaining parts of Wikimedia\Mime and Wikimedia\Stats	2024-09-27 16:19:10 -04:00
SpecialNewPages.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialNewSection.php
SpecialPageData.php
SpecialPageHistory.php
SpecialPageInfo.php
SpecialPageLanguage.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialPagesWithProp.php
SpecialPasswordPolicies.php	specials: Do not pass boolean to Message::numParams	2024-10-26 23:13:14 +00:00
SpecialPasswordReset.php	specials: Fix PHP Warning on Special:PasswordReset for crafted input	2025-04-16 21:01:12 +00:00
SpecialPermanentLink.php
SpecialPreferences.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialPrefixIndex.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialProtectedPages.php	specials: Cleanup for Special:ProtectedPages/ProtectedTitles	2024-09-05 22:28:06 +02:00
SpecialProtectedTitles.php	specials: Cleanup for Special:ProtectedPages/ProtectedTitles	2024-09-05 22:28:06 +02:00
SpecialProtectPage.php
SpecialPurge.php
SpecialRandomInCategory.php	Make $fname mandatory on private functions	2024-09-19 20:09:20 +02:00
SpecialRandomPage.php	Make $fname mandatory on private functions	2024-09-19 20:09:20 +02:00
SpecialRandomRedirect.php
SpecialRandomRootPage.php
SpecialRecentChanges.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialRecentChangesLinked.php	recentchanges: Improve docs, fix file headers, fix doc groups	2024-08-22 23:30:55 +01:00
SpecialRedirect.php
SpecialRemoveCredentials.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialRenameUser.php	SpecialRenameUser: Fix warning display	2024-10-28 23:49:27 +00:00
SpecialResetTokens.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialRevisionDelete.php
SpecialRunJobs.php
SpecialSearch.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialShortPages.php	Use content dir in DoubleRedirects and ShortPages special pages	2024-10-08 09:05:56 +00:00
SpecialSpecialPages.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialStatistics.php
SpecialTags.php	Replace uses of deprecated ChangeTags static methods	2024-10-16 13:30:12 -04:00
SpecialTrackingCategories.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialUnblock.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialUncategorizedCategories.php
SpecialUncategorizedImages.php
SpecialUncategorizedPages.php
SpecialUncategorizedTemplates.php
SpecialUndelete.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialUnlinkAccounts.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialUnlockdb.php
SpecialUnusedCategories.php
SpecialUnusedImages.php
SpecialUnusedTemplates.php	Add __EXPECTUNUSEDTEMPLATE__ magic word to filter Special:UnusedTemplates	2024-08-20 05:07:45 -07:00
SpecialUnwatchedPages.php	Move Language and friends into Language namespace	2024-08-10 13:36:30 +02:00
SpecialUpload.php	Use explicit nullable type on parameter arguments	2024-10-16 20:58:33 +02:00
SpecialUploadStash.php
SpecialUserLogin.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialUserLogout.php	Customise Special:UserLogout success message for temporary account	2024-09-12 11:06:46 +01:00
SpecialUserRights.php	Use namespaced classes	2024-10-21 20:41:20 +02:00
SpecialVersion.php	Deprecate OutputPage::{get,set}PreventClickjacking()	2024-10-17 23:51:39 -04:00
SpecialWantedCategories.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00
SpecialWantedFiles.php
SpecialWantedPages.php
SpecialWantedTemplates.php
SpecialWatchlist.php	Remove meaningless @var documentation from constants	2024-10-09 09:33:12 +02:00
SpecialWhatLinksHere.php	SpecialWhatLinksHere: Ensure namespace variable is defined	2024-10-24 05:55:43 +00:00
SpecialWithoutInterwiki.php	specials: Add missing documentation to class properties	2024-09-13 19:10:50 +00:00