Last modified: 2011-08-22 22:08:59 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T30510, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 28510 - Searching for terms with periods in the query string gives 403 errror - e.g. Data.gov
Searching for terms with periods in the query string gives 403 errror - e.g. ...
Status: RESOLVED FIXED
Product: Wikimedia Mobile
Classification: Unclassified
Retired (Ruby) Gateway (Other open bugs)
.5
All All
: Normal major with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on: 30512
Blocks:
  Show dependency treegraph
 
Reported: 2011-04-12 12:12 UTC by Terence Eden
Modified: 2011-08-22 22:08 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Terence Eden 2011-04-12 12:12:31 UTC
Performing a search for any term with a dot/period in the query results in an error.
For example 
http://en.m.wikipedia.org/wiki?search=Data.gov

Results in 
"Forbidden

You don't have permission to access /wiki on this server.
Apache/2.2.14 (Ubuntu) Server at en.m.wikipedia.org Port 80"

This happens across all instances of Mobile Wikipedia that I could find.

I believe this is caused by a misconfiguration in .htaccess .
Comment 1 Bawolff (Brian Wolff) 2011-04-13 00:43:15 UTC
Sounds like the work around for the xss issue in IE6. (Based on what was said at bug 28235 Comment 9 ). Anyways cc'ing Tim to this bug since it looks to be caused by the fix for the other bug.
Comment 2 Tim Starling 2011-04-13 03:59:56 UTC
That's precisely the kind of URL that we can't allow. Add another parameter to the end of the query string, or use POST.
Comment 3 Terence Eden 2011-04-13 09:55:59 UTC
Using the search box on en.m.wikipedia.org produces the same error.
Doing a search for whitehouse.org returns
http://en.m.wikipedia.org/wiki?search=whitehouse.org
Which currently gives a 403

Adding an extra query does indeed fix the problem
http://en.m.wikipedia.org/wiki?search=whitehouse.org&source=
or
http://en.m.wikipedia.org/wiki?search=whitehouse.org&source=foo
both work.

Is it possible to alter the mobile wikipedia search to add a source parameter?
Comment 4 Patrick Reilly 2011-08-22 22:08:59 UTC
This issue is fixed in the new Mobile Frontend extension. This will be resolved once the new extension is pushed live to production.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links