Page MenuHomePhabricator

Creating a Partial Block with page restrictions through the API allows for non-existing Titles resulting in ipblocks_restrictions.ir_value = 0
Closed, DuplicatePublic

Description

When creating a block through the API it is possible to use any string as part of the page restrictions. Using a non-existing Title results in an entry on ipblocks_restrictions with ir_value = 0

In my opinion SpecialBlock::processForm() should fail o return with a warning if non-existing titles are being used as part of the page restrictions and PageRestriction should not be saved if ir_value is 0

Note: this issue does not fail on save. It fails while editing the block through SpecialBlock

Event Timeline

TBolliger moved this task from Untriaged to Snackbox on the Anti-Harassment board.
TBolliger subscribed.

Please let me know if this becomes more urgent to tackle.

TBolliger lowered the priority of this task from Medium to Lowest.Jan 30 2019, 10:55 PM
TBolliger moved this task from Backlog to User blocking on the MediaWiki-User-management board.

What is the problem with blocking a user from creating specific nonexistent pages?