Page MenuHomePhabricator

EditorJourney records revision IDs for diffs
Closed, ResolvedPublic


If a user goes to a page's edit history and clicks to see a diff, event.query will contain revision IDs related to that diff. We redact the page title from the query, but not the revision IDs.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 27 2019, 6:23 PM

Change 539598 had a related patch set uploaded (by Kosta Harlan; owner: Kosta Harlan):
[mediawiki/extensions/WikimediaEvents@master] EditorJourney: Redact sensitive values for diff and oldid

Change 539598 merged by jenkins-bot:
[mediawiki/extensions/WikimediaEvents@master] EditorJourney: Redact sensitive values for diff and oldid

@nettrom_WMF: Assuming this task is about MediaWiki-extensions-WikimediaEvents, hence adding project tag so others can find this task when searching for tasks under that project or looking at that project workboard.

Etonkovidova closed this task as Resolved.Oct 9 2019, 11:44 PM

Checked in betalabs - for visiting diffs event_query: title=redacted&type=revision&diff=redacted&oldid=redacted is recorded.