Page MenuHomePhabricator

Make ApiClearHasMsg require POST
Closed, ResolvedPublic

Description

ApiClearHasMsg calls setNewTalk(), updating the DB.

  • Analyze usage of action=clearhasmsg via GET.

If usage is basically nonexistent, we can JFDI. If there is significant usage, we'll have to follow a checklist like in T145649.

Event Timeline

Bad news: Every user of clearhasmsg uses it via GET.

Good news: There are only 44 hits between 2016-09-16 08:22:29 and 2016-09-23 08:40:27. And except for a few random IP hits (none of which have any contributions or talk page messages on the relevant wikis), it looks like it's all users of Huggle. Get Huggle fixed and I think we can go ahead and just make the breaking change.

Change 324224 had a related patch set uploaded (by Anomie):
API: Make action=clearhasmsg require POST

https://gerrit.wikimedia.org/r/324224

Change 324224 merged by jenkins-bot:
API: Make action=clearhasmsg require POST

https://gerrit.wikimedia.org/r/324224