Page MenuHomePhabricator

Creating a Partial Block with page restrictions through the API allows for non-existing Titles resulting in ipblocks_restrictions.ir_value = 0
Open, LowestPublic

Description

When creating a block through the API it is possible to use any string as part of the page restrictions. Using a non-existing Title results in an entry on ipblocks_restrictions with ir_value = 0

In my opinion SpecialBlock::processForm() should fail o return with a warning if non-existing titles are being used as part of the page restrictions and PageRestriction should not be saved if ir_value is 0

Note: this issue does not fail on save. It fails while editing the block through SpecialBlock

Related Objects

Event Timeline

dmaza created this task.Jan 15 2019, 4:20 PM
Restricted Application added subscribers: MGChecker, Aklapper. · View Herald TranscriptJan 15 2019, 4:20 PM
TBolliger triaged this task as Medium priority.Jan 15 2019, 4:51 PM
TBolliger moved this task from Untriaged to Snackbox on the Anti-Harassment board.
TBolliger added a subscriber: TBolliger.

Please let me know if this becomes more urgent to tackle.

TBolliger lowered the priority of this task from Medium to Lowest.Jan 30 2019, 10:55 PM
TBolliger moved this task from Backlog to User blocking on the MediaWiki-User-management board.