| Index: trunk/phase3/includes/User.php |
| — | — | @@ -531,6 +531,12 @@ |
| 532 | 532 | global $wgContLang; |
| 533 | 533 | $name = $wgContLang->ucfirst( $name ); |
| 534 | 534 | |
| | 535 | + # Reject names containing '#'; these will be cleaned up |
| | 536 | + # with title normalisation, but then it's too late to |
| | 537 | + # check elsewhere |
| | 538 | + if( strpos( $name, '#' ) !== false ) |
| | 539 | + return false; |
| | 540 | + |
| 535 | 541 | # Clean up name according to title rules |
| 536 | 542 | $t = Title::newFromText( $name ); |
| 537 | 543 | if( is_null( $t ) ) { |
| Index: trunk/phase3/RELEASE-NOTES |
| — | — | @@ -69,6 +69,8 @@ |
| 70 | 70 | * (bug 1229) Balance columns in diff display evenly |
| 71 | 71 | * Right-align diff line numbers in RTL language display |
| 72 | 72 | * (bug 9332) Fix instructions in tests/README |
| | 73 | +* (bug 9813) Reject usernames containing '#' to avoid silent truncation |
| | 74 | + of fragments during the normalisation process |
| 73 | 75 | |
| 74 | 76 | == MediaWiki API changes since 1.10 == |
| 75 | 77 | |