Last modified: 2014-02-19 22:08:00 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T60012, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 58012 - If a template is deleted, the text is still shown
If a template is deleted, the text is still shown
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
Flow (Other open bugs)
unspecified
All All
: Normal enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on: 58009
Blocks: 56506
  Show dependency treegraph
 
Reported: 2013-12-04 22:50 UTC by Kunal Mehta (Legoktm)
Modified: 2014-02-19 22:08 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Kunal Mehta (Legoktm) 2013-12-04 22:50:07 UTC
See also: 57991

If I create a template, and transclude it into a Flow post ({{template}}), and then delete the template, the text is still visible. This is an issue because there is no way to track template usage due to bug 58009.
Comment 1 Bingle 2013-12-04 22:54:27 UTC
The WMF core features team tracks this bug on Mingle card https://mingle.corp.wikimedia.org/projects/flow/cards/583, but people from the community are welcome to contribute here and in Gerrit.
Comment 2 MZMcBride 2014-01-28 05:46:27 UTC
Dupe of bug 57512?
Comment 3 Maryana Pinchuk 2014-02-07 00:10:27 UTC
As described in bug 57512, this is the current intended behavior. A Flow post is a snapshot in history; editing or deleting a template in the template namespace days, months, or years later shouldn't change the way it looked at the time it was posted in a discussion. 

If, during the course of beta-testing Flow, a critical use-case is discovered for this feature, we can reconsider it, but we're not going to build it out now.
Comment 4 MZMcBride 2014-02-07 02:53:17 UTC
(In reply to comment #3)
> As described in bug 57512, this is the current intended behavior. A Flow post
> is a snapshot in history; editing or deleting a template in the template
> namespace days, months, or years later shouldn't change the way it looked at
> the time it was posted in a discussion.

I think this creates a trivially exploitable attack vector. I did a bit of testing at [[Wikipedia talk:Flow/Developer test page]].

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links