Gergő Tisza af37a4c77d Fix login API for users with @ in their usernames ... An @ in the username caused the password to be treated as a bot password, but apparently some real usernames still contain it. Try both logins instead. Security considerations are the same as for the other bot password syntax: the length check makes sure we do not provide any information on a timing side channel about the password unless it is extremely long. Change-Id: I58f42544a08c3208c41f54cfae932632d9c5affa		2016-09-14 01:47:52 +00:00
..
format	SECURITY: Improve cross-domain-policy mangling	2016-05-20 09:48:11 -07:00
query	API: Warn when input parameters are normalized	2016-08-29 15:00:45 +00:00
ApiBaseTest.php	API: Warn when input parameters are normalized	2016-08-29 15:00:45 +00:00
ApiBlockTest.php
ApiContinuationManagerTest.php
ApiEditPageTest.php	API: When undoing an edit, allow overriding content model.	2016-09-08 20:19:45 -07:00
ApiErrorFormatterTest.php	API: Some raw message cleanup	2016-08-24 13:19:52 -04:00
ApiLoginTest.php	Fix login API for users with @ in their usernames	2016-09-14 01:47:52 +00:00
ApiMainTest.php	Fix various phpcs error from last security patches	2016-05-20 20:20:36 +02:00
ApiMessageTest.php
ApiModuleManagerTest.php
ApiOpenSearchTest.php	Rename OpenSearch qiprofile parameter back to profile	2016-07-28 10:25:33 -07:00
ApiOptionsTest.php
ApiPageSetTest.php	API: Warn when input parameters are normalized	2016-08-29 15:00:45 +00:00
ApiParseTest.php
ApiPurgeTest.php
ApiQueryAllPagesTest.php
ApiQueryWatchlistIntegrationTest.php	Refactor database-related code in ApiQueryWatchlist	2016-06-29 10:21:17 +02:00
ApiQueryWatchlistRawIntegrationTest.php	Refactor database-related code in ApiQueryWatchlistRaw	2016-07-06 12:57:39 +00:00
ApiResultTest.php
ApiRevisionDeleteTest.php
ApiSetNotificationTimestampIntegrationTest.php	Add ApiSetNotificationTimestampIntegrationTest	2016-05-18 12:08:47 +01:00
ApiStashEditTest.php	test: basic test for ApiStashEdit	2016-06-16 22:26:24 +02:00
ApiTestCase.php	Remove $wgDisableAuthManager	2016-08-09 23:00:27 +00:00
ApiTestCaseUpload.php
ApiTestContext.php
ApiTokensTest.php	Make deprecated TestUser properties private	2016-06-22 15:43:54 +00:00
ApiUnblockTest.php
ApiUploadTest.php	Remove uses of deprecated TestUser properties	2016-06-22 16:40:31 +01:00
ApiWatchTest.php
generateRandomImages.php
MockApi.php	API: Use U+001F (Unit Separator) for separating multi-valued parameters	2016-08-29 11:00:25 -04:00
MockApiQueryBase.php
PrefixUniquenessTest.php
RandomImageGenerator.php
UserWrapper.php
words.txt