SECURITY: Prevent blocked users from purging pages
commit7fc84bbd23c1205e13c7a8332ab39e6ff52ca107
authorReedy <reedy@wikimedia.org>
Thu, 15 Apr 2021 11:59:01 +0000 (15 12:59 +0100)
committerReedy <reedy@wikimedia.org>
Wed, 23 Jun 2021 15:27:01 +0000 (23 16:27 +0100)
tree583804c01bf265ba491591bc648a02ee4d29bbfb
parentd262673ea05edc17953f025eef237c2afed17fbc
SECURITY: Prevent blocked users from purging pages

CVE-2021-35197

Bug: T280226
Change-Id: Id783618e885998cddf45a4cfc7b2c19fd0c7e9f5
RELEASE-NOTES-1.36
includes/actions/PurgeAction.php
includes/api/ApiPurge.php