Page MenuHomePhabricator

API allows viewing of oversighted diffs
Closed, InvalidPublic

Description

Author: it_is_me_here

Description:
wikiEd diff-view of an OSed diff to a non-OSer

The green-triangle diff button (I think it's part of wikiEd: https://en.wikipedia.org/wiki/User:Cacycle/wikEd) appears to allow you to see a Hidden (OSed) diff (see the attached). I'm a sysop but not an OS on en.wiki, and, at the very least, pressing the green triangle button did *something*; I'm not sure if it actually displayed any Hidden material, but it might be worth a look.


Version: unspecified
Severity: normal
URL: https://en.wikipedia.org/w/index.php?title=Keith_Michael_Patrick_O%27Brien&diff=prev&oldid=480135487

Attached:

wiki.png (723×1 px, 94 KB)

Details

Reference
bz35153

Event Timeline

bzimport raised the priority of this task from to Unbreak Now!.Nov 22 2014, 12:14 AM
bzimport added a project: WikiEditor.
bzimport set Reference to bz35153.
bzimport added a subscriber: Unknown Object (MLST).

confirmed. probably a difference in what the API is doing versus the regular diff. Updating summary for clarity.

Cacycle's script gets the text of the old revision (which is public), tries to get the text of the next revision (which is deleted, so falls back to an empty string) and then displays the diff between those two (which looks like the page just was blanked). There is no data visible which should be hidden. So where is the bug, apart from the fact, that it is not really sensible to show the button with the delta? That is a problem with Cacycle's script, not with MediaWiki (and the WikiEditor extension has nothing to do with this). You can inform Cacycle on [[User talk:Cacycle/wikEd]].

I'm assuming this isn't a bug in MediaWiki, per the last comment, so resolving.