Author: mathias.schindler
Description:
http://<!-- -->www.spamurl.tld does not get noticed by the CAPTCHA thing
Version: unspecified
Severity: normal
URL: http://test.wikipedia.org/w/index.php?title=Current_events&diff=198&oldid=197
Description
Description
Details
Details
- Reference
- bz4823
Revisions and Commits
Revisions and Commits
| Unknown Object (Diffusion Commit) |
Event Timeline
Comment Actions
robchur wrote:
I suppose the simplest solution is to strip out HTML comments before doing
processing on text with any extensions, hooks or hacks.
Comment Actions
psychonaut wrote:
I don't understand what this issue has to do with CAPTCHAs. Can someone please
explain it to me?
Comment Actions
beesley wrote:
(In reply to comment #3)
I don't understand what this issue has to do with CAPTCHAs. Can someone please
explain it to me?
Captchas are invoked if someone tries to save an external link on a page, but if
they start that link with http://<!-- -->www. instead of http://www. the captcha
is not invoked, making it easier for spam bots to save their spam.