Page MenuHomePhabricator

Creating a user with username=Rrrr produces a warning that displays html entities/code
Closed, InvalidPublic

Description

Found when testing 4.1.6.170 alpha and 4.1.6.168 beta on iPad mini iOS 8.2
2.0.105-alpha-2015-07-27 on Samsung Tablet Ce0168(Android 4.0.4)

  1. On the 'Create account' page, type 'rrrr' (no quotes) as User name
  2. Fill in password and confirm password fields, click on Next.
  3. Enter captcha - click Done and the warning will be displayed:
The name &quot;Rrrr&quot; is too similar to the following username:<ul><li>Rrrr\\\\\\\\\\<\li><\ul>Please choose another name.

IMG_0249 (1).PNG (2×1 px, 205 KB)

IMG_0248.PNG (2×1 px, 199 KB)

Expected:

  • a user should not see any irrelevant info - e.g. specific references to other usernames or some html code.

Event Timeline

Etonkovidova raised the priority of this task from to Needs Triage.
Etonkovidova updated the task description. (Show Details)
Etonkovidova subscribed.

a user should not see any irrelevant info - e.g. specific references to other usernames or some html code.

Well I would argue that the reference to another username is very relevant in this case, and should be preserved. It's just the HTML markup that is the issue. It's a bit unfortunate that the extension that returns this error puts the conflicting username(s) inside a <ul> list, since this will make it much harder for us to parse and present natively.

Not to mention ampersand escapes:

&quot; Rrrr &quot;

Sounds like an error message from the AntiSpoof extension

Change 230538 had a related patch set uploaded (by Dbrant):
Improve duration/presentation of error Snackbars.

https://gerrit.wikimedia.org/r/230538

Change 230538 merged by jenkins-bot:
Improve duration/presentation of error Snackbars.

https://gerrit.wikimedia.org/r/230538

JMinor set Security to None.
JMinor moved this task from Needs Triage to Bug Backlog on the Wikipedia-iOS-App-Backlog board.