Can register usernames that could be potentially valid IPv6 addresses
Open, NormalPublic


It has been reported on Wikipedia that MediaWiki does not prevent the creation of users with usernames that could be potentially valid IPv6 addresses, and that MediaWiki treats 2001:db8 like 2001:db8::. Furthermore, MediaWiki does not effectively deal with usernames which already are potentially valid IPv6 addresses.

Version: 1.24rc
Severity: major

bzimport set Reference to bz33853.
bzimport added a subscriber: Unknown Object (MLST).
Jasper created this task.Jan 21 2012, 1:55 AM
aaron added a comment.Feb 13 2012, 8:42 PM

I've tested 1.19 and can't seem to create IPv6 usernames.

Current IPv6 names must be migrated, which will be easier when bug 31863 is fixed.

I created a user named 8000:63bf:3fff:fdd2:
on today so I guess this ticket is still valid.

That's not a valid IPv6 address, it's missing a colon at the end.

Add Comment