We already check if the anonymous coward leaving a comment is trying to use the name of a registered user, we should also run the name through our access control rules for usernames.

Comments

ricabrantes’s picture

ricabrantes commented
Version: x.y.z » 7.x-dev
Status: Active » Closed (fixed)

bump...

ricabrantes’s picture

ricabrantes commented
Status: Closed (fixed) » Active
mdupont’s picture

mdupont
Primary language French
Location Switzerland
commented
Version: 7.x-dev » 8.x-dev
andypost’s picture

andypost
he/him
Primary language Russian
commented
Issue summary: View changes
Status: Active » Closed (duplicate)
Related issues: +#472202: 'Name' value for anonymous comments can conflict with registered usernames, +#1165432: Update comment $comment->name logic