Page MenuHomePhabricator

FancyCaptcha should have blacklist for string combinations
Closed, ResolvedPublic

Description

It wouldn't hurt to add a blacklist option for the captcha image generator. When combining words, sometimes you get... interesting combinations which weren't intended. ;)


Version: unspecified
Severity: enhancement
URL: http://en.wikipedia.org/wiki/Image:Peashits.png

Details

Reference
bz10408

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:54 PM
bzimport set Reference to bz10408.
bzimport added a subscriber: Unknown Object (MLST).

Removing "hits" from the wordlist would probably be reasonable -- it's going to produce an unfortunate combination whenever it gets appended to a plural word. I believe that'd make this a Wikimedia configuration issue.

Filed a separate bug 16166: Remove "hits" from CAPTCHA dictionary. We can leave this bug for discussion of the merits of a potential blacklisting feature.

On ticket #2009100610015643 the customer mailed us complaining because he got "yourcrazy"

FT2.wiki wrote:

"Hit" or "hits" is a bad one for other reasons too ("cows hit"?)

FT2.wiki wrote:

ah, sorry, I missread "appended" as "prepended". Duplicate of comment #2

This was actually fixed in r23563 a few hours after the bug was originally filed, but there's no default blacklist (bug 21025).