Page MenuHomePhabricator

API does not prevent thanking of bots
Closed, ResolvedPublic

Description

See url. While the "thank" link is not added for flagged bots, it's still possible to use the API to thank users in the bot group.


Version: unspecified
Severity: minor
URL: https://en.wikipedia.org/w/index.php?title=Special%3ALog&type=thanks&user=&page=User%3ALegobot&year=&month=-1&tagfilter=

Details

Reference
bz56954

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 2:32 AM
bzimport set Reference to bz56954.

Change 97358 had a related patch set uploaded by Theopolisme:
Perform checks before thanking via API

https://gerrit.wikimedia.org/r/97358

Change 97358 merged by jenkins-bot:
Perform checks before thanking via API

https://gerrit.wikimedia.org/r/97358