Examples: https://www.mediawiki.org/w/index.php?title=MediaWiki:I_hope_this_doesn%27t_work&action=history and https://www.mediawiki.org/w/index.php?title=User_talk:Legoktm/Foo&action=history
How to reproduce:
Go to [[mw:Special:ApiSandbox]]:
- action=flow
- page= page you want to blank
- params={"topic_list": {"topic": "Topic!", "content": "Content!"}}
- token=Flow token from API, +\ if you're logged out
Press Make request, and the page will be replaced with the string: "This talk page has been taken over by a [https://www.mediawiki.org/wiki/Special:MyLanguage/Flow_Portal Flow board]."
Quick fix: Stick a $title->userCan('edit', $this->getUser()) check in ApiFlow
Version: unspecified
Severity: blocker
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=66994