https://bugzilla.wikimedia.org/show_bug.cgi?id=29165

       Web browser: ---
             Bug #: 29165
           Summary: ArticleFeedback should not let users to submit
                    feedback about pages where it is not (supposed to be)
                    enabled
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: ArticleFeedback
        AssignedTo: tpars...@wikimedia.org
        ReportedBy: mybugs.m...@gmail.com
                CC: krinklem...@gmail.com
    Classification: Unclassified


I just noticed that if I copy/paste the following to the address bar of my
browser the ArticleFeedback form is loaded and I can submit the feedback even
for pages where the extension is not enabled:

 javascript:mw.loader.load( 'ext.articleFeedback' );void 0;

Shouldn't the extension check if it is enabled before accepting the submitted
data?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to