Steps to replicate the issue (include links if applicable):
What happens?:
If I click the confirmation link, I could confirm an account I don't own
What should have happened instead?:
If the email had the username, I could confirm whether that is my account before confirming the email
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| EchoVerifyEmailReminder: Add username to provide context | Ladsgroup | mediawiki/extensions/Echo | master | +5 -5 |
Change #1259212 had a related patch set uploaded (by Ladsgroup; author: Ladsgroup):
[mediawiki/extensions/Echo@master] EchoVerifyEmailReminder: Add username to provide context
It scared a friend of mine too who thought his account is getting compromised (cc @Darafsh) so I decided to make the patch for it myself :D
Change #1259212 merged by jenkins-bot:
[mediawiki/extensions/Echo@master] EchoVerifyEmailReminder: Add username to provide context