关键信息 漏洞标题: Cascading protection doesn't apply to transcluded file description pages 版本: 1.23.0 严重性: minor 状态: Closed, Resolved 公开性: Public 标签: BUG REPORT 描述 如果一个级联保护的页面转义了一个文件描述页面(不显示相应的文件,如果有),文件描述页面将不会继承级联保护,尽管从文件描述页面转义的任何内容(除了其他文件描述页面)将正确地继承保护。 相关对象 提及: T46490#6-CVE-2015-32697: Cascading protection is not preventing file revisions 重复项: T42426: Cascading protection should protect the file, not the description page 活动历史 创建者: Jackmcbroom 创建时间: Jun 15 2014, 9:56 PM 相关变更: - Change #233207: Cascade-protection: Files for files - Change #1112259: PermissionManager: Cascade protect file content, not wikitext - Change #1130586: [mediawiki/core] REL1_42 PermissionManager: Differentiate between cascading protection of file content and file pages - Change #1130587: [mediawiki/core] REL1_43 PermissionManager: Differentiate between cascading protection of file content and file pages - Change #1130588: [mediawiki/core] REL1_39 PermissionManager: Differentiate between cascading protection of file content and file pages 标签 MediaWiki Page-protection (Cascade) MediaWiki Platform Team (In progress) User-notice-archive (Backlog) 订阅者 Aklapper Danny7712 Eoi-Boss gerbrbot Jackmcbroom Krenair matmanrex