0001-Do-not-allow-user-scripts-on-Special-PasswordReset.patch
Ladsgroup (Amir Sarabadani)
Actions

Authored By

	Ladsgroup
	Jun 15 2018, 5:22 PM

Size

877 B

Referenced Files

None

Subscribers

None

0001-Do-not-allow-user-scripts-on-Special-PasswordReset.patch
View Options

	From d7e283c7e67c1b652351c5c7c0df02e19b26b1f2 Mon Sep 17 00:00:00 2001
	From: Amir Sarabadani <ladsgroup@gmail.com>
	Date: Fri, 15 Jun 2018 19:21:13 +0200
	Subject: [PATCH] Do not allow user scripts on Special:PasswordReset

	Bug: T192134
	Change-Id: I819ac8d7f0b6d341f2b46d7ed34b7cf28632e620
	---
	includes/specials/SpecialPasswordReset.php \| 2 ++
	1 file changed, 2 insertions(+)

	diff --git a/includes/specials/SpecialPasswordReset.php b/includes/specials/SpecialPasswordReset.php
	index 7342bb0..9accc66 100644
	--- a/includes/specials/SpecialPasswordReset.php
	+++ b/includes/specials/SpecialPasswordReset.php
	@@ -48,6 +48,8 @@ class SpecialPasswordReset extends FormSpecialPage {

	public function __construct() {
	parent::__construct( 'PasswordReset', 'editmyprivateinfo' );
	+
	+ $this->getOutput()->disallowUserJs();
	}

	private function getPasswordReset() {
	--
	2.7.4

Mime Type: text/x-diff
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 6025927
Default Alt Text: 0001-Do-not-allow-user-scripts-on-Special-PasswordReset.patch (877 B)