Last modified: 2010-05-15 14:36:14 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T6371, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 4371 - Disallow tilde character in signatures
Disallow tilde character in signatures
Product: MediaWiki
Classification: Unclassified
User preferences (Other open bugs)
All All
: Normal normal (vote)
: ---
Assigned To: Rob Church
Depends on:
  Show dependency treegraph
Reported: 2005-12-23 18:05 UTC by Rob Church
Modified: 2010-05-15 14:36 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Rob Church 2005-12-23 18:05:43 UTC
If a user's signature contains ~~~, ~~~~ or ~~~~~, then these will not be
expanded to their signature during editing. However, this inserts raw tilde
characters into text which causes the next user's signature to be inserted upon
their next edit.

Not only is this leading to some messy templates being created; having arbitrary
text plonked in the middle of a user's signature could lead to interesting
problems in the future. In addition, a few users on En. have raised that it
could be used for "fraudulent" purposes.

I've long maintained that we should be restrictive about what goes into
signatures. I'll be posting a patch which disallows the tilde character in
signatures shortly.
Comment 1 Borgx 2005-12-26 07:46:15 UTC
perhaps it would be better if the patch is for automatically replace the "~"
character in user signature with unicode ~ rather then disallow it.
Comment 2 Carl Fürstenberg 2005-12-29 21:24:06 UTC
The tilde isn't the biggest problem per se, you could add for example
"{{subst:fraud template}} ~~~~" in yuor signature, then the next editor will
expand that template and add it's signature after.
Comment 3 Rob Church 2005-12-29 21:25:51 UTC
Kill substitutions while we're at it. No good reason for it.
Comment 4 Rob Church 2006-01-02 11:42:50 UTC
Fixed in CVS HEAD.

Note You need to log in before you can comment on or make changes to this bug.