Page MenuHomePhabricator

Security review for ArticleCreationWorkflow extension branch master
Closed, ResolvedPublic


Project Information

Description of the tool/project

ArticleCreationWorkflow is a simple extension that intercepts certain users when they attempt to create a new page and sends them to a special page instead. The contents of the special page are configurable on-wiki (as a MediaWiki message).

Description of how the tool will be used at WMF

The initial use of the this extension will be during the English Wikipedia ACTRIAL to direct non-autoconfirmed users to either create new articles in their user sandbox or via the Article Wizard.



Has this project been reviewed before?


Working test environment

Currently set up at You can test at You will need to have an account and be logged in. Ping me on IRC when you're ready to test and I can walk you through it.


Community Tech will be responsible for the project after deployment.

Event Timeline

@dpatrick: FYI, we have a deadline on this of September 7, but it's probably the smallest MediaWiki extension ever created, so it should be easy to review. Let me know if September 7th is not going to be doable, so that we can change the schedule for ACTRIAL.

	"config": {
		"ArticleCreationWorkflows": {
			"description": "Describes conditions when new page creation should be intercepted. See doc/config.txt for details.",
			"value": []

There is no doc/config.txt...

@kaldari, I spoke with @Reedy and put this on the schedule for the week of 8/28. Sam's already started working on it.

Change 373968 had a related patch set uploaded (by MaxSem; owner: MaxSem):
[mediawiki/extensions/ArticleCreationWorkflow@master] Add config.txt mentioned in extension.json

Change 373968 merged by jenkins-bot:
[mediawiki/extensions/ArticleCreationWorkflow@master] Add config.txt mentioned in extension.json

Visiting Special:CreatePage

The article-creation-landing-page message has not been defined.

Screen Shot 2017-08-29 at 18.29.43.png (258×1 px, 35 KB)

What should it be set as?


It requires the obsolete Extension:ClickTracking and is only shown to some users based on bucketing logic.

Is this still the case? The extension has been undeployed on WMF wikis.. No depedancy seems to be defined in extension.json/elsewhere

And I can't see any references to this in the code...

It also says needs MW 1.19, and was written by @kaldari...

Think the page needs a bit of an update :)

The code looks fine. Wanted to test the extension a bit/poke around further, but stuck on my comment above and what that actually means I need to do... And what I need to put on the page

Updated the page. Basically, redirecting you to the special page and displaying whatever article-creation-landing-page contains on the local wiki is all the functionality of this extension:)

Reedy moved this task from In Progress to Waiting on the deprecated-security-team-reviews board.

Full speed ahead!