Page MenuHomePhabricator

MediaWiki doesn't warn about or disallow blocking localhost (127.0.0.1) which can cause weird bugs
Open, MediumPublic

Description

MediaWiki doesn't warn about or disallow blocking localhost (127.0.0.1) which can cause weird bugs such as T60237. Perhaps it should do one or the other.


See Also:

Details

Reference
bz58258

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 2:37 AM
bzimport set Reference to bz58258.
bzimport added a subscriber: Unknown Object (MLST).

I have opened bug 58237 for various issues related to 127.0.0.1 :)

I strongly believe (see e.g. https://gerrit.wikimedia.org/r/#/c/92050/ my comment to patchset 1) that 127.0.0.1 should be nothing special;

  1. if the operation is executed automagically on behalf of some realuser, her WebRequest should be taken (IP address, user agent, etc.) even if it's an automated action. That's why for example I think bug 42345 should be WONTFIXed as of now.

There is an edge case here what to do in case of delayed updates - they might appear as done from some IP address that can already be used by some other "person" later. Maybe IP address in the logs should always be separately timestamped irrelevant to the actual operation log?

  1. otherwise we should have special means not to use real users at all in such scenario. I proposed various ways to solve this (https://gerrit.wikimedia.org/r/#/c/92252/, also some thoughts http://thread.gmane.org/gmane.science.linguistics.wikipedia.technical/73503).

In this particular case I think that MassMessage should be changed not to use 127.0.0.1

bug 58272 is tracking "loopback" issues, not bug 58271.

Krinkle removed a project: OKR-Work.
Krinkle updated the task description. (Show Details)
Krinkle edited projects, added MediaWiki-User-management; removed MediaWiki-General.
Krinkle moved this task from Backlog to User blocking on the MediaWiki-User-management board.
Krinkle removed a subscriber: wikibugs-l-list.