Can register usernames that could be potentially valid IPv6 addresses
OpenPublic

Description

It has been reported on Wikipedia that MediaWiki does not prevent the creation of users with usernames that could be potentially valid IPv6 addresses, and that MediaWiki treats 2001:db8 like 2001:db8::. Furthermore, MediaWiki does not effectively deal with usernames which already are potentially valid IPv6 addresses.


Version: 1.24rc
Severity: major

bzimport added a subscriber: wikibugs-l.
bzimport set Reference to bz33853.
Jasper created this task.Via LegacyJan 21 2012, 1:55 AM
aaron added a comment.Via ConduitFeb 13 2012, 8:42 PM

I've tested 1.19 and can't seem to create IPv6 usernames.

Current IPv6 names must be migrated, which will be easier when bug 31863 is fixed.

Aklapper added a comment.Via ConduitJun 19 2014, 1:30 PM

I created a user named 8000:63bf:3fff:fdd2:
on mediawiki.org today so I guess this ticket is still valid.

Jasper added a comment.Via ConduitJun 19 2014, 4:04 PM

That's not a valid IPv6 address, it's missing a colon at the end.

Add Comment