Page MenuHomePhabricator

SF's #autoedit should bypass CAPTCHAs
Open, Needs TriagePublic

Description

A user (the same one from the other CAPTCHA issue) points out that #autoedit doesn't work if the user is required to fill out a CAPTCHA. Ideally, #autoedit should just bypass the CAPTCHA, I would think - it can't be spammed.

Event Timeline

Yaron_Koren assigned this task to Foxtrott.
Yaron_Koren raised the priority of this task from to Needs Triage.
Yaron_Koren updated the task description. (Show Details)
Yaron_Koren added a subscriber: Yaron_Koren.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 11 2015, 3:20 PM

I don't think this can be done without major effort. Autoedit uses the SF API module. If you open it for autoedit you open it for everything. It's not enough to just add a new parameter 'fromAutoedit' to the API. Any bot can send that.
Furthermore we would have to find a way to "convince" EditPage to force a save against the hook error from ConfirmEdit.

@Foxtrott - Ah, that makes sense. Well, the task is here if anyone wants to take it... feel free to remove yourself as the assignee.

Restricted Application added a subscriber: StudiesWorld. · View Herald TranscriptNov 19 2015, 2:03 AM