Session failure
There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Go back to the previous page, reload that page and then try again.
Happens when JS is disabled. Probably regression from the watch token api change.
Version: unspecified
Severity: major
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T31068 MediaWiki bugs to be fixed for 1.18wmf1 deployment (tracking) | |||
| Declined | None | T31847 Regression: &action=unwatch is broken with JS off |
The watch tab in Vector skin seems to work just fine with JS off. Are you explicitly doing a ?action=unwatch link manually, or is this a UI component elsewhere in the interface, or with a particular skin that might be behaving differently?
Works for me. But user mailer is sending unwatch links without a token.
Hopefully, the token last long enough to work well in emails.
No, tokens cannot be used from emails -- by definition they cannot since whatever's being sent is *not in your session*.