HomePhabricator

SECURITY: Don't treat non-existent user as "any anon"

Description

SECURITY: Don't treat non-existent user as "any anon"

Due to an issue with how the username was checked, it would show
all topics created by any anon when a non-existent user was requested.

Bug: T162621
Change-Id: I243712cedb75fc9c51dc45404eed65bf2d42c111
(cherry picked from commit bab6c698ebb4362d4f928e566a7b9cb7e198abe6)

Details

Provenance
Mattflaschen-WMFAuthored on Apr 10 2017, 6:50 PM
Parents
rEFLWd5116157689f: Fix Flow composer.json and gen-autoload.php
Branches
Unknown
Tags
Unknown
References
REL1_28, refs/changes/09/348409/2
ChangeId
I243712cedb75fc9c51dc45404eed65bf2d42c111