Last modified: 2013-03-17 13:50:12 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 10715 - A user can get around the 255 character signature limit.
A user can get around the 255 character signature limit.
Product: MediaWiki
Classification: Unclassified
User preferences (Other open bugs)
All All
: Lowest minor with 3 votes (vote)
: ---
Assigned To: Nobody - You can work on this!
: parser
: 38974 (view as bug list)
Depends on:
  Show dependency treegraph
Reported: 2007-07-27 03:41 UTC by Timothy J. Crowell
Modified: 2013-03-17 13:50 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Timothy J. Crowell 2007-07-27 03:41:14 UTC
A user can get around the 255 character signature limit by creating a user subpage just for their signature (example: User MediaWiki/sig) and then type in their user preferences something like: {{subst:User MediaWiki/sig}}. There are legitimate uses for this type of transclusion, but there are also illegitimate uses.

I propose that the MediaWiki software automatically count the amount of characters in the signature and truncate the length of the resulting code to 255 characters.

I found this bug in Wikipedia (version: 1.11alpha (r24275)).
Comment 1 Daniel Cannon (AmiDaniel) 2007-07-27 05:12:03 UTC
Yeah, I think that was pointed out when it was first introduced. In the same way, a user could simply add {{subst:User:Me/sig}} on his own -- no need for the ~~~~ bit. The limit's not there to be inescapable, nor should it really be something we invest effort into ensuring IMO.
Comment 2 Timothy J. Crowell 2007-07-27 06:49:20 UTC
Typing {{subst:Me/sig}} would not produce the timesnap, it would have to be: {{subst:Me/sig}} ~~~~~. ;)
Comment 3 Danny B. 2007-07-27 17:36:57 UTC
A bit experienced user doesn't even need subpage in his user space, he can have eg. button on edit toolbar to insert entire signature code.

Lowering down the priority and severity, inclining to WONTFIX since it wouldn't bring the necessary effect.
Comment 4 Timothy J. Crowell 2007-07-27 19:09:16 UTC
This is not priority, I suggest changing the status of the bug to LATER.
Comment 5 Rob Church 2007-07-27 20:12:20 UTC
Minor bug - yes, it is technically a bug, since the limit is advertised as a "limit" - but certainly not a high priority, and probably not something we want to waste time fixing, since it's been rightly pointed out by others that users can, unbelievably in this day and age, put anything they want on a page.
Comment 6 Daniel Cannon (AmiDaniel) 2007-08-26 05:07:19 UTC
Changing to LATER .. don't think this is a matter of urgency or priority that we want to address right now.
Comment 7 Timothy J. Crowell 2007-09-15 05:24:00 UTC
Changed "Product" detail from "MediaWiki" to "Wikimedia".
Comment 8 Chad H. 2012-08-02 12:50:20 UTC
*** Bug 38974 has been marked as a duplicate of this bug. ***
Comment 9 Chad H. 2012-08-02 12:51:48 UTC
(In reply to comment #6)
> Changing to LATER .. don't think this is a matter of urgency or priority that
> we want to address right now.

REOPENING, "not urgent" isn't a reason to close a bug. LATER should be reserved for "things we can't do right now because of [some other thing]"
Comment 10 Danny B. 2012-08-03 09:55:07 UTC
Re-closing as LATER:

As long as the signature is not stored as a metadata somewhere else than on page, this is invalid request because of principles of editing of wiki page - I don't have to use ~~~~ for signature, I can always manually sign with whatever text I want, even different way anytime I edit. Tildas signature is not any metadata at the moment, but just a shortcut which is not mandatory to be used.
Comment 11 Andre Klapper 2012-12-15 11:09:02 UTC
If it's technically invalid, close it as INVALID. :)
Reopening to get rid of deprecated LATER resolution.

Note You need to log in before you can comment on or make changes to this bug.