security: Ensure requests to the tool come only from the Wikimedia domains

WikiMovimentoBrasil / deadlinkchecker

GNU General Public License v3.0

3 stars 1 forks source link

security: Ensure requests to the tool come only from the Wikimedia domains #27

Closed Alwoch closed 4 months ago

albertoleoncio commented 4 months ago

* Load script here in order to get window.opener.location.host
* Send back to server: wiki adress + session_id: https://deadlinkchecker.toolforge.org/finishlogin?wiki={wiki_address}&sessionid={session_id}
* Saves on database: UPDATE users SET language = $wiki WHERE session_id = $session_id
* Redirects user to Special:Deadlinkchecker