Skip to content

Commit

Permalink
added disallowUserJs()
Browse files Browse the repository at this point in the history
Do not allow scripts which can be modified by wiki users to load on this page, matching to other password related pages.
  • Loading branch information
Markus-Rost authored and jayktaylor committed May 28, 2024
1 parent 0dedf52 commit adabfb2
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions includes/SpecialMigrateUserAccount.php
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,7 @@ public function execute( $par ) {
$this->userNameUtils = MediaWikiServices::getInstance()->getUserNameUtils();
$this->userFactory = MediaWikiServices::getInstance()->getUserFactory();

$this->getOutput()->disallowUserJs();
$this->checkReadOnly();
$this->getOutput()->enableOOUI();
$this->getOutput()->addModules( 'special.migrateuseraccount' );
Expand Down

0 comments on commit adabfb2

Please sign in to comment.