[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Chad H. changed: What|Removed |Added Version|1.15.2 |1.15.x -- Configure bugmail: https://bugzil

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Platonides changed: What|Removed |Added CC||platoni...@gmail.com --- Comment #9 from

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 --- Comment #8 from Roan Kattouw 2010-04-17 10:26:36 UTC --- (In reply to comment #7) > Step by step: > 1. I submit a request with lgname and lgpassword and save the token from this > response > 2. I submit a request with parameter "lgtoken",

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 --- Comment #7 from xqt 2010-04-15 12:29:13 UTC --- Step by step: 1. I submit a request with lgname and lgpassword and save the token from this response 2. I submit a request with parameter "lgtoken", with the value from the token in step 1. bu

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Bryan Tong Minh changed: What|Removed |Added CC||bryan.tongm...@gmail.com --- Comment

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 --- Comment #5 from xqt 2010-04-15 12:02:18 UTC --- I agree, it's not a problem to solve infinite loops by client. But mw does not react as described -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Roan Kattouw changed: What|Removed |Added Status|REOPENED|RESOLVED CC|

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 --- Comment #3 from Reedy 2010-04-15 11:43:15 UTC --- Should be relatively trivial to fix... -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC l

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 xqt changed: What|Removed |Added Status|RESOLVED|REOPENED Resolution|FIXED

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Reedy changed: What|Removed |Added Version|1.16|1.15.2 -- Configure bugmail: https://bugzilla

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Reedy changed: What|Removed |Added CC||s...@reedyboy.net Component|Installat

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 xqt changed: What|Removed |Added CC||i...@gno.de Component|User login

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Tim Starling changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

[Bug 23076] Login CSRF

https://bugzilla.wikimedia.org/show_bug.cgi?id=23076 Tim Starling changed: What|Removed |Added AssignedTo|wikibug...@lists.wikimedia. |tstarl...@wikimedia.org