Page MenuHomePhabricator
Create Task
Maniphest T60305

Validate redirect destination in Wikimania Scholarships application
Closed, ResolvedPublic
Actions

Description

Security review feedback:

Wikimania/Scholarship/Controllers/Login.php

  • handlePost - sanity check $next before you redirect

Version: wmf-deployment
Severity: normal

Details

Reference
bz58305

Related Objects
Search...

Event Timeline

• bzimport raised the priority of this task from to Unbreak Now!.Nov 22 2014, 2:41 AM
• bzimport added a project: Wikimedia-Wikimania-Scholarships.
• bzimport set Reference to bz58305.
• bzimport added a subscriber: Unknown Object (MLST).
bd808 created this task.Dec 11 2013, 3:24 AM
gerritbot added a comment.Dec 11 2013, 4:16 AM

Change 100750 had a related patch set uploaded by BryanDavis:
Validate redirect destination on login

https://gerrit.wikimedia.org/r/100750

gerritbot added a comment.Dec 11 2013, 8:23 PM

Change 100750 merged by jenkins-bot:
Validate redirect destination on login

https://gerrit.wikimedia.org/r/100750

bd808 moved this task from Backlog to Archive on the Wikimedia-Wikimania-Scholarships board.Dec 7 2014, 12:08 AM
Luke081515 removed a subscriber: • wikibugs-l-list.Jan 28 2016, 5:57 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits