Page MenuHomePhabricator

Special:Linksearch should default to all protocols (protocol-less column for externallinks)
Open, LowPublic

Description

Special:Linksearch should default to all protocols instead of just http. This quirk is documented in the default MediaWiki:Linksearch-text. As it stands, this allows linkspammers to evade scrutiny by placing https links.

Example query: Special:Linksearch/*.spam.example.com should pick up the link to https://spam.example.com/blah I placed in my personal sandbox, but I have to search Special:Linksearch/https://*.spam.example.com to pick up this link.


Version: unspecified
Severity: enhancement

Details

Reference
bz12810

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:06 PM
bzimport set Reference to bz12810.
bzimport added a subscriber: Unknown Object (MLST).
MER-C created this task.Jan 27 2008, 4:34 AM
brion added a comment.Feb 2 2008, 12:27 AM

Currently you'd have to do separate queries for every possible protocol, and paging the list wouldn't be cleanly possible.

To work cleanly, another index field would have to be added to the externallinks table which doesn't include the protocol.

Extensions is now part of MediaWiki core (1.14alpha) -> changing product and component

In fact, when pagination occurs, even if you place a domain without protocol, pagination links convert the domain to http:// automatically. For example, try following the next page at https://www.mediawiki.org/wiki/Special:LinkSearch/commons.wikimedia.org and see how http:// is added to the domain in the search input field.

kaldari set Security to None.