Page MenuHomePhabricator

js insertion after posting comment on talk page
Closed, InvalidPublic

Description

Author: when_babies_attack

Description:
After leaving a message on a user's talk page, a bunch of JavaScript got appended to it. See: http://en.wikipedia.org/w/index.php?title=User_talk:Gigs&action=historysubmit&diff=342006772&oldid=341890610

Win7 64bit, Core2 Duo on a dell XPS 1330, Google Chrome 4.0.249.78 (36714). MSE antivirus.

First time this has happened. Was working perfectly earlier today. Bug occurs on my talk page as well: http://en.wikipedia.org/wiki/User_talk:Throwaway85#test


Version: unspecified
Severity: enhancement
OS: other
Platform: PC

Details

Reference
bz22389

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:50 PM
bzimport set Reference to bz22389.
bzimport added a subscriber: Unknown Object (MLST).

when_babies_attack wrote:

Confirmed change has not occurred as a result of tampering with scripts in monobook.js -t85

when_babies_attack wrote:

This issue is confined to Chrome, does not occur with FireFox. Will file similar report w/ google.

In order to narrow it down, does it still happen when not logged in, if it only happens when logged in, does it stop happening when you disable any gadgets you had enabled and clear special:mypage/monobook.js ? (aka try to narrow down if its a wikipedia issue or a mediawiki one).

when_babies_attack wrote:

So it doesn't happen while logged out, but it still occurs when I clear my monobook and disable all gadgets: http://en.wikipedia.org/w/index.php?title=User_talk:Throwaway85&action=historysubmit&diff=342159175&oldid=342158599

Still only happens on Chrome, and apparently still only happens to me. I know that makes it nearly impossible to replicate/fix. Still occurs after a fresh install of Chrome. If there's any other info I can give you, let me know.

conrad.irwin wrote:

Oh, let's be cleverer about this. The javascript mentions "lastpass" which is a chrome plugin - do you happen to have that? If so, you'll have to go and get the author of that to fix it. (And I'd strongly recommend not using anything so buggy to store passwords).

when_babies_attack wrote:

Well shit son, I do indeed. Weird. I was confused as to why LastPass for Chrome seemed to be much, much worse than LastPass for Firefox. Hell, *everything* for Chrome is worse than its ff equivalent. Alright, I'll take the issue up with their devs. Thanks for your help.