Last modified: 2013-02-15 22:15:43 UTC
Although the autogenerated checkuser API documentation says that it accepts POST request only, it appears to accept GET requests as well. I clicked on one of the demo links, which should have failed since it's GET, and instead it actually ran the check and generated an entry in the CU log.
In api/ApiQueryCheckUser.php L204: public function mustBePosted() { return true; } Yet I'm able to confirm this on my testwiki. This may be due to some recent changes in how the query/list module works in core, I'm looking into it a bit more.
Gerrit change #49344
Merged by Chris.