Page MenuHomePhabricator

Whitelist external links to toolserver in captcha configuration
Closed, ResolvedPublic

Description

Author: brianna.laugher

Description:
(I thought captchas were part of an extension, but I couldn't find it in the
list of MediaWiki extensions.)

Templates such as [[commons:template:nsd]] (no source, date) mark images as
missing source. When anonymous users do this, they are requested to answer a
captcha because of the insertion of external links, presumably because of the
CheckUsage link to Wikimedia toolserver. (A user reported this and it has also
happened to me, when logged out.)

Two possible solutions:

  1. Toolserver URLs should somehow be marked as non-external.
  2. Only URLs directly entered by the user should prompt a captcha, not URLs that

happen to be on a template they insert.

thanks.


Version: unspecified
Severity: enhancement

Details

Reference
bz9309

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:39 PM
bzimport set Reference to bz9309.
bzimport added a subscriber: Unknown Object (MLST).
  1. Added *.wikimedia.de to the whitelist.
  1. isn't feasible, since it would enable very easy mass spamming: add one

template, pass the captcha, then spam the template to a million pages with no
limitations.