In mobile version, hidden edit summary is always shown to users who have permission to view it with no indication that it's hidden for everyone else
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	1339861mzb
	Nov 17 2015, 4:55 PM

Description

When admins hide edit's summaries from desktop version it still apparent from mobile version and this thing is very annoying because such edit's summaries contain inappropriate words and sometimes cursing. I wish this problem to be solved as early as possible. Regards.

The hidden edit summary is not visible to unprivileged users; it's visible to users who have permissions to view it, but there's no indication in the UI that it is hidden. In desktop pages, you need to click through to see hidden edit summaries even if you have permission to view them.

@1339861mzb has helpfully provided some images showing the issue.

Desktop - for a hidden revision a message is shown and it is not possible to see the diff OR the summary by default. A link is provided to view the diff and controls are shown to reveal the summary.

Screenshot_٢٠١٧١١٢٩-٠٢٠٢١٨.jpg (1×1 px, 372 KB)

Mobile - for a hidden revision the diff is always shown and the edit summary is shown (potentially containing curse words and should be considered a form of harassment for editors)

Screenshot_٢٠١٧١١٢٩-٠١٥٥١٥.jpg (1×1 px, 494 KB)

Screenshot_٢٠١٧١١٢٩-٠١٥٣٢٧.jpg (1×1 px, 602 KB)

Desktop - in history page the summary is treated differently visually (via a strikethrough) to signal a deleted revision.

Screenshot_٢٠١٧١١٢٩-٠٢٠١٤٦.jpg (1×1 px, 782 KB)

Mobile - in history page the summary looks no different from other pages for admins so doesn't indicate it is hidden (nor does it provide mechanisms to hide):

Screenshot_٢٠١٧١١٢٩-٠٢٠١٠١.jpg (1×1 px, 282 KB)

(for non-admins it is however surpressed:

the diff is hidden but the edit summary still shows o_O:

Screenshot_٢٠١٧١١٢٩-٠١٠٠١٨.jpg (1×1 px, 260 KB)

Developer notes

We already have code in InlineDifferenceEngine to check isSuppressedDiff and isUserAllowedToSee but when user is allowed to see.

$allowed = $this->isUserAllowedToSee(); but SpecialMobileDiff does not utilise these in getIntroHTML - it renders summary regardless.

MobileSpecialPageFeed::renderFeedItemHtml renders the rows in the history, contributions etc... It expects summary to be hidden before rendering.
SpecialMobileContributions::showContributionsRow, SpecialHistory::showRow, SpecialHistory::showFeedResultRow all duplicate code for working out what the summary should be. If a user can see a deleted comment we render it, however instead of doing this we should check the value of unhide (providing an unhide option when ready)

Open questions

In mobile we should hide by default to admins, but what control should we use for revealing hidden comments?

Testing steps

Ask Jdlrobson to give your username surpressor rights. To test this you'll work as an anon and logged in user.

Suppressed revision summary

Visit http://reading-web-staging.wmflabs.org/w/index.php?diff=46&mobileaction=toggle_view_desktop on desktop as an anon and notice how the edit summary is striked-through and the user is informed there was an edit summary but it was removed:

Screen Shot 2018-01-19 at 11.50.38 AM.png (362×807 px, 77 KB)

Switch to mobile and notice how the edit summary disappears entirely.

Screen Shot 2018-01-19 at 11.51.03 AM.png (392×963 px, 43 KB)

On mobile there is no indication edit summary and username was removed and the body is shown (Expected: should be hidden)

Screen Shot 2018-01-19 at 11.52.01 AM.png (443×1 px, 56 KB)

Visit http://reading-web-staging.wmflabs.org/w/index.php?diff=41&mobileaction=toggle_view_desktop on desktop

as a logged in user with suppression rights. Body is hidden and there is an indication username and summary has been removed.

Screen Shot 2018-01-19 at 11.52.23 AM.png (287×756 px, 59 KB)

Suppressed revision body

Visit http://reading-web-staging.wmflabs.org/wiki/Special:MobileDiff/43?useformat=mobile as anon and you will see:

Screen Shot 2018-01-19 at 11.39.26 AM.png (410×1 px, 48 KB)

Login and visit http://reading-web-staging.wmflabs.org/wiki/Special:MobileDiff/43?useformat=mobile again and you will now see this:

Note the message and what the admin user sees are inconsistent.

Expected: The body of the revision should be hidden but when "view this diff" is clicked it should be visible.

Details

	Subject	Repo	Branch	Lines +/-
	Admins should not see surpressed content in feeds	mediawiki/extensions/MobileFrontend	master	+92 -51

Customize query in gerrit

Related Objects

Mentioned In: T210120: Suppressed username appears weird when viewing history

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes

No. That is not the issue. Please use mobile phone to go the link and you will sea that clearly. Thanks

Correction: when using mobile version by admin from desktop it have to click through to unhide the details but in mobile version it is aparent for admin without clicking unhide the details. Thats the problem. I am sorry the language barrier has limited the explanation

I am soory for poor language. Sorry

Thank you for the explanations. As I understand, this is not a security issue? It seems that the hidden edit summary is not visible to unprivileged users; it's visible to users who have permissions to view it, but there's no indication in the UI that it is hidden. In desktop pages, you need to click through to see hidden edit summaries even if you have permission to view them.

Yes. The aidmin from descktop have to click to show what is hidden but from mobile it is apparent wihout clicking and this is inappropriate becuse the benefit of clicking to show hidden is that to limit seeing the hidden edits to admins who want to verify that the edits must be hidden if they think the action of the admin who hide it may be not correct but from mobile this benefite is abscent and all admins saw hidden inmapproproiate edits although the dont want to see it and this is the problem. We need to put some kind of button to click on it by admins to show hidden. Is this problem going to be solved?. Thanks

matmarex renamed this task from Problem in hiding edit's summary from mobile version to In mobile version, hidden edit summary is always shown to users who have permission to view it (no indication that it's hidden for everyone else).Nov 26 2015, 9:03 PM

matmarex raised the priority of this task from High to Needs Triage.

matmarex updated the task description. (Show Details)

matmarex removed a project: acl*security.

matmarex changed the visibility from "Custom Policy" to "Public (No Login Required)".

matmarex changed the edit policy from "Custom Policy" to "All Users".

matmarex changed Security from Software security bug to None.

Meno25 subscribed.Nov 27 2015, 6:36 PM

• KLans_WMF triaged this task as Lowest priority.Nov 30 2015, 6:01 PM

MBinder_WMF added a project: Web-Team-Backlog.Apr 27 2016, 4:27 PM

MBinder_WMF moved this task from Incoming to Triaged but Future on the Web-Team-Backlog board.Jul 4 2016, 7:23 PM

@Nirzar, how should the feature look? Feel free to re-prioritize as you see fit.

any example screenshots would be great but i think i got the gist of it. i can put up a solution soon

i will provide two pictures for the same page. one from mobile version and
another from disktop version.---1339861mzb

بتاريخ ٠٢‏/١٢‏/٢٠١٦ ١:٠٩ ص، كتب "Nirzar" <no-reply@phabricator.wikimedia.org

:

Nirzar added a comment.

any example screenshots would be great but i think i got the gist of it. i
can put up a solution soon

*TASK DETAIL*
https://phabricator.wikimedia.org/T118864

*EMAIL PREFERENCES*
https://phabricator.wikimedia.org/settings/panel/emailpreferences/

*To: *Nirzar

*Cc: *bmansurov, Nirzar, Meno25, matmarex, Krenair, Dereckson, Aklapper,
1339861mzb, StudiesWorld, Winter

=?UTF-8?B?U2NyZWVuc2hvdHNf2aLZoNmh2aYt2aHZoi3ZoNmjLdmh2akt2aPZpy3ZotmhLnBuZw==?= (1×720 px, 900 KB)

=?UTF-8?B?U2NyZWVuc2hvdHNf2aLZoNmh2aYt2aHZoi3ZoNmjLdmh2akt2aPZpy3ZpdmoLnBuZw==?= (1×720 px, 196 KB)

Xaosflux subscribed.Feb 13 2017, 3:31 PM

This seems confusing to editors so lowest does not seem appropriate here at all.

Jdlrobson renamed this task from In mobile version, hidden edit summary is always shown to users who have permission to view it (no indication that it's hidden for everyone else) to In mobile version, hidden edit summary is always shown to users who have permission to view it with no indication that it's hidden for everyone else.Jun 5 2017, 6:52 PM

Jdlrobson moved this task from Needs triage to Triaged on the Mobile board.Jul 25 2017, 6:08 PM

thank you for your efforts. the problem is partially solved but not totaaly. look here for example the button for unhide is thankfully created but the offensive edits still apparent for admins before hitting unhide button. is that clear to you? note:1339861mzb is my previous username. مصعب is my current username and its rommanization is mossab. please help to complete this task. thanks in advance and regards

another example from page history that the edit summary still apparent for admins before viewing the difference between the two revisions. here the preview after viewing the difference between the two revisions

@Jdlrobson can you read my new comments? regards

@Trizek-WMF please help in copleating the triage of this problem

@1339861mzb this needs input from a designer. Are you able to add screenshots to the ticket? This would help a lot with understanding the problem and possibilities to address the problem.

@Jdlrobson yes i am ready and i will provide a screenshots tomorrow. thanks for response

In T118864#3793138, @1339861mzb wrote:

@Trizek-WMF please help in copleating the triage of this problem

Apparently you now have a contact.
@1339861mzb, don't forget that people can be busy at something, or on a different timezone, or taking days off. Replies can be written after some days. :)

@Jdlrobson i will upload them now. @Trizek-WMF sure. Sorry for that it just that i was working on something and i thought it will take more time than expected but fortunately i finished and uploaded screenshots for clarification

Screenshot_٢٠١٧١١٢٨-١٩٤٤٣١.jpg (1×1 px, 387 KB)

Screenshot_٢٠١٧١١٢٨-١٩٤٠٥٩.jpg (1×1 px, 292 KB)

Screenshot_٢٠١٧١١٢٨-١٩٤١١٦.jpg (1×1 px, 764 KB)

Screenshot_٢٠١٧١١٢٨-١٩٤٢٢٢.jpg (1×1 px, 591 KB)

Screenshot_٢٠١٧١١٢٨-١٩٥٣٠٩.jpg (1×1 px, 297 KB)

Thanks @1339861mzb that's great!! Could you also show us what those look like in English or qqq language codes? It will help me understand a little more as a non-Arabic speaker. 🙏

@Jdlrobson thanks. I am almost always using mobile version so that i know much about its problems than other arab users. Unfortunately the comparison with english will not be compatible because i am admin at arwiki so can unhide sensored revisions but in enwiki i can't even show the difference between revision in the mobile view and i can just do that on desktop view. An example here and i will provide some screenshots.

Screenshot_٢٠١٧١١٢٩-٠٠٥٩٢٣.jpg (1×1 px, 595 KB)

. Regards

If you append ?uselang=en or ?uselang=qqx to your URLs it should magically make the system messages English

e.g. https://ar.wikipedia.org/w/index.php?title=%D8%AE%D8%A7%D8%B5:%D9%82%D8%A7%D8%A6%D9%85%D8%A9_%D8%A7%D9%84%D9%85%D8%B1%D8%A7%D9%82%D8%A8%D8%A9&uselang=en

@Jdlrobson thanks. I used it but it works on one page but on page history it does not work exept when i used the append &uselang=en instead of append ?uselang=en. I uploaded the results.

matmarex unsubscribed.Nov 29 2017, 1:42 PM

@ovasileva @Nirzar given the age of this issue it would be nice to address this. I don't anticipate too much work to do this, and it will result in some much needed refactoring.

Jdlrobson added a project: User-Jdlrobson.Nov 29 2017, 9:08 PM

Jdlrobson moved this task from Inbox to Next up on the User-Jdlrobson board.

Happy to see that great collaboration between @1339861mzb and @Jdlrobson!

• bmansurov unsubscribed.Dec 22 2017, 9:49 PM

Jdlrobson updated the task description. (Show Details)Jan 19 2018, 7:54 PM

Jdlrobson updated the task description. (Show Details)Jan 19 2018, 8:12 PM

Change 405365 had a related patch set uploaded (by Jdlrobson; owner: Jdlrobson):
[mediawiki/extensions/MobileFrontend@master] hide surpressed diff bodies from admins until they unhide

https://gerrit.wikimedia.org/r/405365

gerritbot added a project: Patch-For-Review.Jan 19 2018, 8:29 PM

@1339861mzb I have finally had time to write a fix but it will need someone from the developer community to test and code review it.

In T118864#3922613, @Jdlrobson wrote:

@1339861mzb I have finally had time to write a fix but it will need someone from the developer community to test and code review it.

How can i help in this regard?

If you are able to find a developer with code review rights within your community (our outside it) that also cares about fixing this that will certainly move things a lot faster!

@Meno25 we have proceed very well. What do you think is the appropriate step to do locally?

In T118864#3922618, @Jdlrobson wrote:

If you are able to find a developer with code review rights within your community (our outside it) that also cares about fixing this that will certainly move things a lot faster!

I will wait until developer review. I think there is no developer within arabic wikipedia community so if you know one please tag him. Regards

Restricted Application added a subscriber: alaa. · View Herald TranscriptJan 26 2018, 11:30 AM

I can give access to http://reading-web-staging.wmflabs.org/ (a test wiki) to test this if necessary. If you register do not use the same password you use in production.

In T118864#3929688, @Jdlrobson wrote:

I can give access to http://reading-web-staging.wmflabs.org/ (a test wiki) to test this if necessary. If you register do not use the same password you use in production.

I

Thank you. I just want to this problem to be solved and triaged.

Jdlrobson moved this task from Next up to Blocked on the User-Jdlrobson board.Feb 5 2018, 7:56 PM

ovasileva moved this task from Triaged but Future to Upcoming on the Web-Team-Backlog board.Feb 13 2018, 3:43 PM

ovasileva moved this task from Upcoming to Needs Prioritization on the Web-Team-Backlog board.Feb 13 2018, 5:38 PM

Since this is a complicated workflow I've been asked to sit down and walk through another team member the problem and potential solution.

In T118864#3968369, @Jdlrobson wrote:

Since this is a complicated workflow I've been asked to sit down and walk through another team member the problem and potential solution.

Hope it will be solved soon. I know it is coplicated somewhat nut it is important and so that i submitted it. Regards

Jdlrobson moved this task from Needs Prioritization to Upcoming on the Web-Team-Backlog board.Feb 14 2018, 5:19 PM

Jdlrobson moved this task from Upcoming to Needs Prioritization on the Web-Team-Backlog board.

Jdlrobson moved this task from Needs Prioritization to Upcoming on the Web-Team-Backlog board.Feb 14 2018, 11:39 PM

Change 405365 merged by jenkins-bot:
[mediawiki/extensions/MobileFrontend@master] Admins should not see surpressed content in feeds

https://gerrit.wikimedia.org/r/405365

ReleaseTaggerBot added a project: MW-1.31-release-notes (WMF-deploy-2018-02-20 (1.31.0-wmf.22)).Feb 15 2018, 8:00 PM

@1339861mzb thanks to @MaxSem this should hopefully be fixed by 22nd February. Fingers crossed..
Can be tested on https://en.wikipedia.beta.wmflabs.org/wiki/Test_previews and https://reading-web-staging.wmflabs.org in mean time, but you'll need an account with oversighter rights. Let me know if you want to create a new account on reading-web-staging and test before! Thanks for your patience!

In T118864#3977488, @Jdlrobson wrote:

@1339861mzb thanks to @MaxSem this should hopefully be fixed by 22nd February. Fingers crossed..
Can be tested on https://en.wikipedia.beta.wmflabs.org/wiki/Test_previews and https://reading-web-staging.wmflabs.org in mean time, but you'll need an account with oversighter rights. Let me know if you want to create a new account on reading-web-staging and test before! Thanks for your patience!

Thanks. Thats great!. Yes i want account to test how it appears if possible. Regards

If you create a new account on https://reading-web-staging.wmflabs.org/ and let us know the username one of us can temporarily give you oversight powers to test behaviour!

In T118864#3980362, @Jdlrobson wrote:

If you create a new account on https://reading-web-staging.wmflabs.org/ and let us know the username one of us can temporarily give you oversight powers to test behaviour!

Done. Here

ovasileva moved this task from Needs Prioritization to Upcoming on the Web-Team-Backlog board.Feb 20 2018, 3:37 PM

ovasileva moved this task from Upcoming to Triaged but Future on the Web-Team-Backlog board.Feb 20 2018, 5:17 PM

Sorry @1339861mzb i was away. Did anyone help you with an account? If not it should hopefully be fixed later today on your wiki. Ill keep you posted!

In T118864#3993104, @Jdlrobson wrote:

Sorry @1339861mzb i was away. Did anyone help you with an account? If not it should hopefully be fixed later today on your wiki. Ill keep you posted!

No. But it is not an important thing. The most important is that the problem will be solved :) . Thanks for your help and time.

Still not solved in my wiki. What's the problem?

The deploy is blocked. Will keep you updated.

@1339861mzb it should be live now.

Yes. Great!. Finally! Thank you @Jdlrobson

Sorry it took so long :)
Glad that it's now taken care of!

• Phabricator_maintenance moved this task from Triaged but Future to 2017-18 Q3 on the Web-Team-Backlog board.Mar 7 2018, 4:43 AM

Jdlrobson mentioned this in T210120: Suppressed username appears weird when viewing history.Nov 22 2018, 5:35 PM

	F12665044: Screen Shot 2018-01-19 at 11.52.23 AM.png
	Jan 19 2018, 7:54 PM

	F12665021: Screen Shot 2018-01-19 at 11.51.03 AM.png
	Jan 19 2018, 7:54 PM

	F12665042: Screen Shot 2018-01-19 at 11.52.01 AM.png
	Jan 19 2018, 7:54 PM

	F12665016: Screen Shot 2018-01-19 at 11.50.38 AM.png
	Jan 19 2018, 7:54 PM

	F12664912: Screen Shot 2018-01-19 at 11.39.26 AM.png
	Jan 19 2018, 7:54 PM

	F12664923: Screen Shot 2018-01-19 at 11.40.45 AM.png
	Jan 19 2018, 7:54 PM

	F11073206: Screen Shot 2017-11-29 at 12.58.32 PM.png
	Nov 29 2017, 9:07 PM

	F11057586: Screenshot_٢٠١٧١١٢٩-٠١٠٠١٨.jpg
	Nov 29 2017, 12:09 AM

In mobile version, hidden edit summary is always shown to users who have permission to view it with no indication that it's hidden for everyone elseClosed, ResolvedPublicActions