I just noticed that if I copy/paste the following to the address bar of my browser the ArticleFeedback form is loaded and I can submit the feedback even for pages where the extension is not enabled:
javascript:mw.loader.load( 'ext.articleFeedback' );void 0;
Shouldn't the extension check if it is enabled before accepting the submitted data?
Version: unspecified
Severity: normal