Page MenuHomePhabricator

$wgSpamRegex bypassed when "Add Topic" is used with URL in Subject/headline
Closed, ResolvedPublic

Description

Author: dennisacevedo

Description:
I have $wgSpamRegex set up to "Block ALL external links":

$wgSpamRegex = "/http:\/\//";

However, if someone uses the "Add Topic" tab, and puts an external link as the "Subject/headline", then $wgSpamRegex gets bypassed.

It does still block any external links that are put in the body of the "Add Topic" page.

See:

http://www.mediawiki.org/wiki/Manual_talk:$wgSpamRegex#Using_.22Add_Topic.22_tab_bypasses_this_filter.2C_i.e._http:.2F.2Fwww.mediawiki.org.2Fw.2Findex.php.3Ftitle.3DManual_talk:.24wgSpamRegex


Version: 1.21.x
Severity: major

Details

Reference
bz49694

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 1:58 AM
bzimport set Reference to bz49694.
bzimport added a subscriber: Unknown Object (MLST).

Change 75556 had a related patch set uploaded by IAlex:
(bug 49694) Apply $wgSpamRegex to the new section name in action=edit&section=new

https://gerrit.wikimedia.org/r/75556

Change 75556 merged by jenkins-bot:
(bug 49694) Apply $wgSpamRegex to the new section name in action=edit&section=new

https://gerrit.wikimedia.org/r/75556

See the Gerrit. The basic commit seems fine, but it could be commented better.