Page MenuHomePhabricator

User page plain text link with terminating exclamation mark in email may not be parsed
Closed, DuplicatePublic

Description

Reported that the email sent to accounts with a terminating exclamation mark insufficiently identifies mark in the account name in an email.

Account: Hope&Act3!

Received email:

I'm sorry to inform you that since you did not include the ! at the end of my user name I alighted on the page of an unregistered account, indeed i managed to log in on my own and thus retrieved the intended messages - thanks any way, hope you can fix that

This e-mail was sent by Hope&Act3! to Billinghurst by the "E-mail user" function at Wikisource.


Version: unspecified
Severity: minor

Details

Reference
bz23710

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 11:01 PM
bzimport set Reference to bz23710.
bzimport added a subscriber: Unknown Object (MLST).

This sounds like his e-mail client failed to understand http://en.wikipedia.org/wiki/User:Hope&Act3! properly. Are we wrapping the URL in < > ?

No we are not wrapping urls with < > on enWS. Of course it may be that the user is misreporting components and it is the ampersand that is problematic. All I have is the word of the user.

  • ab

a.koppad wrote:

Hi,

I tried to reproduce the error on http://test2.wikipedia.org/w/index.php?.

I created the ID anukoppad2! on the website and logged into wikipedia as well as wikisource. The login was successful. I logged out, closed the browser, opened up a new firefox browser, and tried logging in again. Successful, no errors.

Third time, I logged out, closed the browsers, opened them again, and tried to login with anukoppad2. It gave me an error,

Login error
There is no user by the name "Anukoppad2". Usernames are case sensitive. Check your spelling, or create a new account.

Anu: Unrelated. This is about the integrated email functionality, not about logging in.

Tried reproducing the bug, went to https://test2.wikipedia.org to test it out.

  1. Created an account
  2. Got a confirmation email saying:

Someone, probably you, from IP address *****,
has registered an account "TestT25710!" with this email address on Wikipedia.

To confirm that this account really does belong to you and activate
email features on Wikipedia, open this link in your browser:

http://test2.wikipedia.org/wiki/Special:ConfirmEmail/1371454a71590b06ad6580b42f7ea664

If you did *not* register the account, follow this link
to cancel the email address confirmation:

http://test2.wikipedia.org/wiki/Special:InvalidateEmail/1371454a71590b06ad6580b42f7ea664

This confirmation code will expire at 07:31, 25 December 2014.

  1. Went to the link, successfully created account, user page at https://test2.wikipedia.org/wiki/User:TestT25710! gives no errors, other than that "there is currently no text in this page. You can search for this page title in other pages, search the related logs, or edit this page."
Nemo_bis renamed this task from Account name with terminating exclamation mark to User page plain text link with terminating exclamation mark in email may not be parsed.Dec 18 2014, 8:26 PM
Nemo_bis set Security to None.

If the comment above is right, this is solved because quotes are sufficiently clear in "TestT25710!".

But I think you misunderstood the report, this is probably about links which are not interpreted as such in full. So I'd consider this a duplicate of the clearer bug 48940.

Aklapper changed the task status from Duplicate to Resolved.Dec 18 2014, 8:46 PM
Aklapper claimed this task.

Awesome, sounds like this is not an issue anymore! Closing as resolved then.
Anybody please reopen (with specific steps given) if this can still be reproduced.

I have already merged this to T50940, and the testing showed no parsing.