Page MenuHomePhabricator

Can register usernames that could be potentially valid IPv6 addresses
Open, MediumPublicBUG REPORT


It has been reported on Wikipedia that MediaWiki does not prevent the creation of users with usernames that could be potentially valid IPv6 addresses, and that MediaWiki treats 2001:db8 like 2001:db8::. Furthermore, MediaWiki does not effectively deal with usernames which already are potentially valid IPv6 addresses.

Version: 1.24rc
Severity: major


TitleReferenceAuthorSource BranchDest Branch
maintain-kubeusers: bump service quota for wikibugsrepos/cloud/toolforge/toolforge-deploy!210bd808work/bd808/T358538main
Customize query in GitLab

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:59 PM
bzimport set Reference to bz33853.
bzimport added a subscriber: Unknown Object (MLST).

I've tested 1.19 and can't seem to create IPv6 usernames.

Current IPv6 names must be migrated, which will be easier when bug 31863 is fixed.

I created a user named 8000:63bf:3fff:fdd2:
on today so I guess this ticket is still valid.

That's not a valid IPv6 address, it's missing a colon at the end.

Aklapper changed the subtype of this task from "Task" to "Bug Report".Feb 15 2022, 9:39 PM
Aklapper removed a subscriber: wikibugs-l-list.

Change 12782 had a related patch set uploaded (by Winston Sung; author: Platonides):

[mediawiki/core@master] Disallow usernames that look like IPv6 addresses