T287542: API action=parse&prop=headhtml leaking user tokens and other private info in cross-origin requests (again)
From cpt
Phabricator Link | T287542 |
---|---|
Status | resolved |
Priority | Needs Triage (violet) |
Points | |
Phabricator Task Created | 2021/07/27 07:53 PM |
Wiki Page Created | 2021/08/10 04:28 PM |
Phabricator Task Last Modified | 2021/08/12 11:10 AM |
Wiki Page Last Updated | 2021/08/12 12:28 PM |
Phabricator Task Closed | 2021/08/10 02:31 PM |
Authored By | suffusion_of_yellow (Suffusion of Yellow) |
Assigned To | Legoktm (Legoktm) |
Projects |
|
Platform Engineering Initiative Column | |
Platform Team Workboards Column | |
Subtasks | |
Parent Tasks |
Column Transitions: (Added project: ⇑, Removed project: ⇓,Entered column: ⇒, Exited column: ⇐)
Project | Column | Date |
---|---|---|
⇑ Security-Team | 27 July 2021 | |
⇑ Security | 27 July 2021 | |
⇑ Vuln-Infoleak | 27 July 2021 | |
⇑ MediaWiki-API | 27 July 2021 | |
⇑ Vuln-CSRF | 27 July 2021 | |
⇑ Regression | 27 July 2021 | |
⇑ Platform Engineering | 29 July 2021 | |
Security-Team | ⇐ Incoming | 29 July 2021 |
Security-Team | ⇒ Watching | 29 July 2021 |
⇑ SecTeam-Processed | 29 July 2021 | |
Security-Team | ⇐ Watching | 6 August 2021 |
Security-Team | ⇒ Incoming | 6 August 2021 |
Security-Team | ⇐ Incoming | 12 August 2021 |
Security-Team | ⇒ Our Part Is Done | 12 August 2021 |