Failure in the spam blacklist to match protocol relative urls
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Mar 7 2012, 4:02 AM

Description

Author: marcosoconnor

Description:
The spam-blacklist doesn't filters a url that is not specified the protocol, but links properly MediaWiki. Taking http or https depending on whether the server is secure or not. This can be used to skip the filter.

Example: odioalosmexicanos\.wordpress

http://es.wikipedia.org/wiki/MediaWiki:Spam-blacklist

http://es.wikipedia.org/w/index.php?action=edit&oldid=54363790

Version: unspecified
Severity: major

Details

Reference: bz35023

Event Timeline

• bzimport raised the priority of this task from to High.Nov 22 2014, 12:15 AM

• bzimport added a project: SpamBlacklist.

• bzimport set Reference to bz35023.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.Mar 7 2012, 4:02 AM

Confirmed. Urls without protocol can be used to avoid the Spam Blacklist.

Fixed in https://gerrit.wikimedia.org/r/15671

Failure in the spam blacklist to match protocol relative urlsClosed, ResolvedPublicActions

Description

Details

Event Timeline

Failure in the spam blacklist to match protocol relative urls
Closed, ResolvedPublic
Actions