From 355cccddf7587a7258164100a00c0fa9c4bb11b3 Mon Sep 17 00:00:00 2001 From: Brian Wolff Date: Tue, 15 May 2018 04:14:37 +0000 Subject: [PATCH] Add whether user is elevated to unsafe js load log To better triage the log entries. Change-Id: Idf6d967d06b118ebd7b4d848e12bb36faf55a1b6 --- includes/actions/RawAction.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/includes/actions/RawAction.php b/includes/actions/RawAction.php index 159e7081a4..50eb28a3cf 100644 --- a/includes/actions/RawAction.php +++ b/includes/actions/RawAction.php @@ -109,13 +109,16 @@ class RawAction extends FormlessAction { $rootPage = strtok( $title->getText(), '/' ); $userFromTitle = User::newFromName( $rootPage, 'usable' ); if ( !$userFromTitle || $userFromTitle->getId() === 0 ) { + $elevated = $this->getUser()->isAllowed( 'editinterface' ); + $elevatedText = $elevated ? 'by elevated ' : ''; $log = LoggerFactory::getInstance( "security" ); $log->warning( - "Unsafe JS/CSS/Json load - {user} loaded {title} with {ctype}", + "Unsafe JS/CSS/Json $elevatedText" . "load - {user} loaded {title} with {ctype}", [ 'user' => $this->getUser()->getName(), 'title' => $title->getPrefixedDBKey(), 'ctype' => $contentType, + 'elevated' => $elevated ] ); $msg = wfMessage( 'unregistered-user-config' ); -- 2.20.1