Author: timwi
Description:
Our documentation states that pages in the MediaWiki namespace are protected by
default. However, by way of experimentation with Anthere, we seem to have come
to the revelation that pages in the MediaWiki namespace are actually permanently
protected, and there is no way to unprotected a particular one.
Version: unspecified
Severity: enhancement
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) | |
| Unknown Object (Diffusion Commit) |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Declined | None | T2625 Unable to unprotect pages in the MediaWiki namespace | |||
| Resolved | None | T4414 Disable unprotect tab for MediaWiki namspace |
jeluf wrote:
Many of the MediaWiki messages allow insertion of HTML into the page. Allowing
anyone
to do this would be a severe security risk. Session hijacking would become much
easier.
gangleri wrote:
reopening this bug as it seems that the behaviour is not stable
see http://wqoq.com/wiki/Wqiki:Protection_log#Unprotecting_MediaWiki_messages
and compare
http://wqoq.com/w/index.php?title=MediaWiki:Sidebar&action=history
I was able to change the message.
regards reinhardt [[user:gangleri]]
robchur wrote:
Well that would be a different bug. Are you an administrator on that wiki? The
MediaWiki namespace is protected for a number of reasons, one of which is, as
mentioned, to prevent HTML injection into pages.
gangleri wrote:
(In reply to comment #4)
Well that would be a different bug. Are you an administrator on that wiki?
No. I am not an administrator at http://wqoq.com/wiki/ .
robchur wrote:
Yet you were able to edit a MediaWiki namespace page? Please attempt to
reproduce, and note the conditions - if you can successfully reproduce this,
please file as a bug.