Need access to Special:Resetpass in order to complete login with temporary e-mailed password.
Add it to the always-on internal whitelist alongside Special:Userlogin
the bidi override characters appended to the lists.
A more thorough blacklist for forbidden and translatable characters would
be wise, though, as might a cleaner method for the lists in the first place.
+* Fix regression in email password resets on read-restricted sites
+
== Languages updated ==
* Always grant access to the login page.
* Even anons need to be able to log in.
*/
- if( $this->isSpecial( 'Userlogin' ) ) {
+ if( $this->isSpecial( 'Userlogin' ) || $this->isSpecial( 'Resetpass' ) ) {
return true;
}