The hard-coded, non-authenticated edit token, +\, will go away soon, see T40417.
The apps should always request an edit token before sending the edit request, even when not logged in. The Android app has this done for description editing but not yet for page editing.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Fetch CSRF token before each page edit | apps/android/wikipedia | master | +8 -12 |
I think this change would prevent weird states like T155005: Error upon attempted edit from occurring. I'm not sure how frequently users are experiencing that but I vote to put it into Kanban sooner than later.
Change 332471 had a related patch set uploaded (by Mholloway):
Fetch CSRF token before each page edit