Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
wiki.techinc.nl/includes/specials
History
Máté Szabó 145d205b4c specials: Fix PHP Warning on Special:PasswordReset for crafted input 
Why:

- Special:PasswordReset uses raw POST values to add username and email
  info to success messages post-submit.
- These values may be parsed by PHP as arrays if a client supplied
  crafted input with multi-value fields.
- Instead of doing our own param validation in onSuccess(), we can reuse
  parsed values in onSubmit() and do the rendering there.

What:

- Move success message processing to onSubmit().

Bug: T392086
Change-Id: I9b0e115c417d0f3080e711441c79608d782932ce
(cherry picked from commit 37d63156c841f9a19080c9438cdf66cf58a7da7a)
2025-04-16 21:01:12 +00:00
..
Contribute Use typed properties in Contribute classes and add GPL license header 2024-10-19 14:37:58 +02:00
exception
formfields Licenses: Use typed properties 2024-10-19 13:04:13 +00:00
forms Use namespaced classes 2024-10-21 20:41:20 +02:00
helpers License: Use typed properties 2024-10-19 15:46:09 +00:00
Hook WhatLinksHere: Allow extensible filters 2024-10-21 14:27:53 +05:30
pagers Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
redirects Prompt user to log in to access Special:My* pages 2024-09-19 19:40:09 +00:00
SpecialActiveUsers.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialAllMessages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialAllPages.php specials: Avoid passing null to str_replace() 2024-10-23 16:19:25 +00:00
SpecialAncientPages.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialApiHelp.php Add namespace to includes/api classes 2024-09-25 19:31:14 +00:00
SpecialApiSandbox.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialAuthenticationPopupSuccess.php Add library to display the login form in a JavaScript modal dialog 2024-05-28 17:54:22 +00:00
SpecialAutoblockList.php Use expression builder instead of raw sql 2024-07-23 23:30:45 +02:00
SpecialBlankpage.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialBlock.php Merge "Make Message and MessageValue compatible" 2024-10-21 15:38:56 +00:00
SpecialBlockList.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialBookSources.php Add namespace and deprecation alias to TextContent 2024-05-19 23:23:01 +03:30
SpecialBotPasswords.php Use namespaced classes (3) 2024-06-16 20:26:43 +02:00
SpecialBrokenRedirects.php Use expression builder instead of raw sql 2024-07-23 23:30:45 +02:00
SpecialCategories.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialChangeContentModel.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialChangeCredentials.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialChangeEmail.php Send temporary accounts to Special:CreateAccount on ::requireNamed 2024-09-24 21:42:17 +00:00
SpecialChangePassword.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialComparePages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialConfirmEmail.php Add namespace to IDBAccessObject and DBAccessObjectUtils 2024-09-27 16:19:10 -04:00
SpecialContribute.php SpecialContribute: Add docs to explain how it works and how to enable it 2024-05-23 21:55:44 +01:00
SpecialContributions.php Indicate IP contributions are legacy when temporary accounts enabled 2024-08-30 16:22:13 +01:00
SpecialCreateAccount.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialDeadendPages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialDeletedContributions.php specials: Do not allow transclusion of Special:DeletedContributions 2024-10-31 20:08:49 +00:00
SpecialDeletePage.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialDiff.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialDoubleRedirects.php Use content dir in DoubleRedirects and ShortPages special pages 2024-10-08 09:05:56 +00:00
SpecialEditPage.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialEditRecovery.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialEditTags.php Merge "Add namespace and deprecation alias to Xml and XmlSelect" 2024-05-16 12:44:57 +00:00
SpecialEditWatchlist.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialEmailInvalidate.php Add namespace to IDBAccessObject and DBAccessObjectUtils 2024-09-27 16:19:10 -04:00
SpecialEmailUser.php specials: Use StatusValue::getMessages() instead of deprecated methods 2024-07-10 10:32:14 +00:00
SpecialExpandTemplates.php Namespace all remaining classes in includes/parser 2024-10-15 23:54:32 +01:00
SpecialExport.php SpecialExport: Prevent passing null to strtolower 2024-09-21 14:55:36 +00:00
SpecialFewestRevisions.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialFileDuplicateSearch.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialFilepath.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialGoToInterwiki.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialImport.php Update help links to point to MediaWiki.org rather than Meta 2024-07-26 11:42:38 -04:00
SpecialJavaScriptTest.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialLinkAccounts.php Remove unchecked exception annotations 2024-09-17 22:20:58 +02:00
SpecialLinkSearch.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialListDuplicatedFiles.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialListFiles.php specials: Use username from query on Special:ListFiles 2024-06-28 23:04:50 +02:00
SpecialListGrants.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialListGroupRights.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialListRedirects.php Use HTML markup instead of bidi control chars in Special:ListRedirects 2024-10-03 22:06:29 +03:30
SpecialListUsers.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialLockdb.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialLog.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialLonelyPages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialLongPages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMediaStatistics.php Add namespace to remaining parts of Wikimedia\Mime and Wikimedia\Stats 2024-09-27 16:19:10 -04:00
SpecialMergeHistory.php WebRequest: Add PHP return type hint for getRawVal 2024-10-10 14:01:26 +00:00
SpecialMIMESearch.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialMostCategories.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMostImages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMostInterwikis.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMostLinked.php specials: Remove page join from Special:MostLinked query 2024-07-30 23:43:18 +02:00
SpecialMostLinkedCategories.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialMostLinkedTemplates.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMostRevisions.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialMovePage.php MovePage, MergeHistory: Suppress redirect for "MediaWiki:"-ns wikitext pages 2024-10-03 18:06:42 +00:00
SpecialMute.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialMyLanguage.php Merge "Implement RedirectStore service" 2024-06-11 02:27:40 +00:00
SpecialNamespaceInfo.php Use getContentLanguage() in two special pages instead of injection 2024-10-05 20:08:43 +03:30
SpecialNewFiles.php Add namespace to remaining parts of Wikimedia\Mime and Wikimedia\Stats 2024-09-27 16:19:10 -04:00
SpecialNewPages.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialNewSection.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPageData.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPageHistory.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPageInfo.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPageLanguage.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialPagesWithProp.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPasswordPolicies.php specials: Do not pass boolean to Message::numParams 2024-10-26 23:13:14 +00:00
SpecialPasswordReset.php specials: Fix PHP Warning on Special:PasswordReset for crafted input 2025-04-16 21:01:12 +00:00
SpecialPermanentLink.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPreferences.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialPrefixIndex.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialProtectedPages.php specials: Cleanup for Special:ProtectedPages/ProtectedTitles 2024-09-05 22:28:06 +02:00
SpecialProtectedTitles.php specials: Cleanup for Special:ProtectedPages/ProtectedTitles 2024-09-05 22:28:06 +02:00
SpecialProtectPage.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialPurge.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialRandomInCategory.php Make $fname mandatory on private functions 2024-09-19 20:09:20 +02:00
SpecialRandomPage.php Make $fname mandatory on private functions 2024-09-19 20:09:20 +02:00
SpecialRandomRedirect.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialRandomRootPage.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialRecentChanges.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialRecentChangesLinked.php recentchanges: Improve docs, fix file headers, fix doc groups 2024-08-22 23:30:55 +01:00
SpecialRedirect.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialRemoveCredentials.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialRenameUser.php SpecialRenameUser: Fix warning display 2024-10-28 23:49:27 +00:00
SpecialResetTokens.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialRestSandbox.php specials: Explicit parse message for Html::warningBox 2024-08-24 21:38:18 +00:00
SpecialRevisionDelete.php Replace a few open/closeElement with Html::rawElement 2024-05-16 17:04:14 +02:00
SpecialRunJobs.php Add namespace and deprecation alias to FormatJson 2024-05-16 16:28:01 +03:30
SpecialSearch.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialShortPages.php Use content dir in DoubleRedirects and ShortPages special pages 2024-10-08 09:05:56 +00:00
SpecialSpecialPages.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialStatistics.php Replace a few open/closeElement with Html::rawElement 2024-05-16 17:04:14 +02:00
SpecialTags.php Replace uses of deprecated ChangeTags static methods 2024-10-16 13:30:12 -04:00
SpecialTrackingCategories.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialUnblock.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialUncategorizedCategories.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUncategorizedImages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUncategorizedPages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUncategorizedTemplates.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUndelete.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialUnlinkAccounts.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialUnlockdb.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUnusedCategories.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUnusedImages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialUnusedTemplates.php Add __EXPECTUNUSEDTEMPLATE__ magic word to filter Special:UnusedTemplates 2024-08-20 05:07:45 -07:00
SpecialUnwatchedPages.php Move Language and friends into Language namespace 2024-08-10 13:36:30 +02:00
SpecialUpload.php Use explicit nullable type on parameter arguments 2024-10-16 20:58:33 +02:00
SpecialUploadStash.php specials: Use StatusValue::getMessages() instead of deprecated methods 2024-07-10 10:32:14 +00:00
SpecialUserLogin.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialUserLogout.php Customise Special:UserLogout success message for temporary account 2024-09-12 11:06:46 +01:00
SpecialUserRights.php Use namespaced classes 2024-10-21 20:41:20 +02:00
SpecialVersion.php Deprecate OutputPage::{get,set}PreventClickjacking() 2024-10-17 23:51:39 -04:00
SpecialWantedCategories.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00
SpecialWantedFiles.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialWantedPages.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialWantedTemplates.php specials: Improve docs and @ingroup tags, fix file headers 2024-05-15 11:59:50 +00:00
SpecialWatchlist.php Remove meaningless @var documentation from constants 2024-10-09 09:33:12 +02:00
SpecialWhatLinksHere.php SpecialWhatLinksHere: Ensure namespace variable is defined 2024-10-24 05:55:43 +00:00
SpecialWithoutInterwiki.php specials: Add missing documentation to class properties 2024-09-13 19:10:50 +00:00