Wikimedia
Use hash_equals() in three places in MediaWiki's PasswordPolicyChecks.php
You should already have some basic understanding of PHP to work on this task. This task is about the MediaWiki core code repository.
$policyVal && $contLang->lc( $password ) === $contLang->lc( $username )
should use hash_equals()
instead of ===
in the file /includes/password/PasswordPolicyChecks.php
.
If you have specific questions, please also ask them in https://phabricator.wikimedia.org/T207777 as some folks might be able to help who are not registered on the GCI website!
You are expected to provide a patch in Wikimedia Gerrit. See https://www.mediawiki.org/wiki/Gerrit/Tutorial for how to set up Git and Gerrit.
Task tags
Students who completed this task
mogmog123