ApiClearHasMsg calls setNewTalk(), updating the DB.
- Analyze usage of action=clearhasmsg via GET.
If usage is basically nonexistent, we can JFDI. If there is significant usage, we'll have to follow a checklist like in T145649.
ApiClearHasMsg calls setNewTalk(), updating the DB.
If usage is basically nonexistent, we can JFDI. If there is significant usage, we'll have to follow a checklist like in T145649.
Subject | Repo | Branch | Lines +/- | |
---|---|---|---|---|
API: Make action=clearhasmsg require POST | mediawiki/core | master | +2 -1 |
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | Anomie | T146526 Make ApiClearHasMsg require POST | |||
Resolved | Petrb | T146900 Huggle should use POST for action=clearhasmsg |
Bad news: Every user of clearhasmsg uses it via GET.
Good news: There are only 44 hits between 2016-09-16 08:22:29 and 2016-09-23 08:40:27. And except for a few random IP hits (none of which have any contributions or talk page messages on the relevant wikis), it looks like it's all users of Huggle. Get Huggle fixed and I think we can go ahead and just make the breaking change.
Change 324224 had a related patch set uploaded (by Anomie):
API: Make action=clearhasmsg require POST