Sync with upstream#32
Open
github-actions[bot] wants to merge 8 commits into
Open
Conversation
Change-Id: I940385727e6f98679f8f07ae46f7627e8f61e364
Change-Id: I974e0d3241a4326127d0c0cc9b38117dafeb35b4
Change-Id: Ie4ac2555409d542cfe499eade736e7593c049e08
CVE-2026-58027 Why: * The QueryAbuseFilters API (action=query&list=abusefilters) returns the hit count for all filters, including private and protected ones, even when the requesting user lacks the necessary permissions. The Special:AbuseFilter UI correctly hides the hit count using canSeeLogDetailsForFilter(), but the API does not perform this check. What: * Gate the 'hits' field in the API response behind the same canSeeLogDetailsForFilter() permission check that the UI uses in AbuseFilterPager::formatValue(). * Add test coverage for hit count visibility with protected and hidden filters for users with varying permission levels. Bug: T406954 Change-Id: Icd1a8e01366c2e8f4ed4cf0b3fdd3fca88725266
Change-Id: I19988519e9c680f4b62c8987d9da4313b6d09b70
Change-Id: I1288e86c666fd7bc78167cee6b1c90bc4ccc51d9
Change-Id: I44a6ae899917b2ed113212a131165f7c603838d9
Change-Id: Ic68680a644ecc1115738348872774a11fab55374
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.