Change Details

== Case 1 == Special:EditTags exposes suppressed (hideuser-ed) username in (Logs) link due to username are hard coded. Step to reproduce: 1. Logged in as user 1. Go to Special:Log/block or similar page 1. Check revision deleted or suppressed username log entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Click (Logs) Link Expected: Should not hard code username in the link when log is deleted or suppressed. Original reporter : [User:Ohgi](https://ja.wikipedia.org/wiki/user:ohgi) == Case 2 == Expose suppress log by set logid by manually Step to reproduce: 1. Logged in as user 1. Go to Special:Log 1. Check any entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Set logid as suppress log (e.g. increase or decrease logid by any logid) 1. View the page e.g. https://test.wikipedia.org/w/index.php?action=historysubmit&type=logging&editchangetags=1&ids%5B224251%5D=1 Expected: **MUST** prohibit access to the log

EditTags/revision delete interface leaks the following data for users with appropriate rights (in edittags case that is all users): The target of log entries that are restricted via log_deleted db field. The full log entry of logs that are restricted via $wgLogRestrictions == Case 1 == Special:EditTags exposes suppressed (hideuser-ed) username in (Logs) link due to username are hard coded. Step to reproduce: 1. Logged in as user 1. Go to Special:Log/block or similar page 1. Check revision deleted or suppressed username log entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Click (Logs) Link Expected: Should not hard code username in the link when log is deleted or suppressed. Original reporter : [User:Ohgi](https://ja.wikipedia.org/wiki/user:ohgi) == Case 2 == Expose suppress log by set logid by manually Step to reproduce: 1. Logged in as user 1. Go to Special:Log 1. Check any entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Set logid as suppress log (e.g. increase or decrease logid by any logid) 1. View the page e.g. https://test.wikipedia.org/w/index.php?action=historysubmit&type=logging&editchangetags=1&ids%5B224251%5D=1 Expected: **MUST** prohibit access to the log

EditTags/revision delete interface leaks the following data for users with appropriate rights (in edittags case that is all users): The target of log entries that are restricted via log_deleted db field. The full log entry of logs that are restricted via $wgLogRestrictions == Case 1 == Special:EditTags exposes suppressed (hideuser-ed) username in (Logs) link due to username are hard coded. Step to reproduce: 1. Logged in as user 1. Go to Special:Log/block or similar page 1. Check revision deleted or suppressed username log entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Click (Logs) Link Expected: Should not hard code username in the link when log is deleted or suppressed. Original reporter : [User:Ohgi](https://ja.wikipedia.org/wiki/user:ohgi) == Case 2 == Expose suppress log by set logid by manually Step to reproduce: 1. Logged in as user 1. Go to Special:Log 1. Check any entry 1. Click [Edit tags of selected log entries] (MediaWiki:log-edit-tags) button 1. Set logid as suppress log (e.g. increase or decrease logid by any logid) 1. View the page e.g. https://test.wikipedia.org/w/index.php?action=historysubmit&type=logging&editchangetags=1&ids%5B224251%5D=1 Expected: **MUST** prohibit access to the log