Per bug 41309 [1], it was possible to specify action=edit&model=fjlsgk (or even something like css)
Then click preview and see fatal exception.
https://bugzilla.wikimedia.org/show_bug.cgi?id=41309
Per gerrit change 29616, we use only the default model and format now:
https://gerrit.wikimedia.org/r/#/c/29616/1/includes/EditPage.php
Just want to ask if there is any reason for allowing these parameters in EditPage? If so, there were some to-do items in the code and we should implement it in a better way.
Until then, I don't see benefit of having these parameters in EditPage.
Version: 1.21.x
Severity: normal