Page MenuHomePhabricator

EditorJourney records revision IDs for diffs
Closed, ResolvedPublic

Description

If a user goes to a page's edit history and clicks to see a diff, event.query will contain revision IDs related to that diff. We redact the page title from the query, but not the revision IDs.

Event Timeline

Change 539598 had a related patch set uploaded (by Kosta Harlan; owner: Kosta Harlan):
[mediawiki/extensions/WikimediaEvents@master] EditorJourney: Redact sensitive values for diff and oldid

https://gerrit.wikimedia.org/r/539598

Change 539598 merged by jenkins-bot:
[mediawiki/extensions/WikimediaEvents@master] EditorJourney: Redact sensitive values for diff and oldid

https://gerrit.wikimedia.org/r/539598

@nettrom_WMF: Assuming this task is about MediaWiki-extensions-WikimediaEvents, hence adding project tag so others can find this task when searching for tasks under that project or looking at that project workboard.

Checked in betalabs - for visiting diffs event_query: title=redacted&type=revision&diff=redacted&oldid=redacted is recorded.