Last modified: 2010-05-15 14:36:14 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 4371 - Disallow tilde character in signatures
Disallow tilde character in signatures
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
User preferences (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Rob Church
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-12-23 18:05 UTC by Rob Church
Modified: 2010-05-15 14:36 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Rob Church 2005-12-23 18:05:43 UTC
If a user's signature contains ~~~, ~~~~ or ~~~~~, then these will not be
expanded to their signature during editing. However, this inserts raw tilde
characters into text which causes the next user's signature to be inserted upon
their next edit.

Not only is this leading to some messy templates being created; having arbitrary
text plonked in the middle of a user's signature could lead to interesting
problems in the future. In addition, a few users on En. have raised that it
could be used for "fraudulent" purposes.

I've long maintained that we should be restrictive about what goes into
signatures. I'll be posting a patch which disallows the tilde character in
signatures shortly.
Comment 1 Borgx 2005-12-26 07:46:15 UTC
perhaps it would be better if the patch is for automatically replace the "~"
character in user signature with unicode ~ rather then disallow it.
Comment 2 Carl Fürstenberg 2005-12-29 21:24:06 UTC
The tilde isn't the biggest problem per se, you could add for example
"{{subst:fraud template}} ~~~~" in yuor signature, then the next editor will
expand that template and add it's signature after.
Comment 3 Rob Church 2005-12-29 21:25:51 UTC
Kill substitutions while we're at it. No good reason for it.
Comment 4 Rob Church 2006-01-02 11:42:50 UTC
Fixed in CVS HEAD.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links