Page MenuHomePhabricator

stashbot: timestamps in SAL messages can be interpreted as ticket links
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • go to an IRC channel with active !log (SAL) command
  • paste a line that contains a timestamp including 'T' and an integer: example: <joal>!log rerun webrequest failed jobs for hour 2022-12-08-T11:00Z with updated workflow (no dataloss checks)

What happens?:

A comment with the log line is added to unrelated ticket "T11". https://phabricator.wikimedia.org/T11#8454014

What should have happened instead?:

Nothing should happen on the unrelated old ticket.

Software version (skip for WMF-hosted wikis like Wikipedia):

Other information (browser name/version, screenshots, etc.):

Event Timeline

Dzahn triaged this task as Low priority.Dec 16 2022, 6:21 PM
Dzahn updated the task description. (Show Details)
[06:12:26] <_joe_>	 bd808: you can probably just look at the capture length?
[06:12:40] <_joe_>	 there not much chance anyone edits a task under 4 digits

This seems like a relatively simple and effective solution. Things between T1: Get puppet runs into logstash and T2001: [DO NOT USE] Documentation is out of date, incomplete (tracking) [superseded by #Documentation] are unlikely to be targeted by !log messages. @Dzahn pointed out on IRC that just ignoring T1: Get puppet runs into logstash..T23: Identify features Gerrit users would miss in Phabricator would also address this particular case.

bd808 changed the task status from Open to In Progress.Dec 16 2022, 6:43 PM
bd808 claimed this task.
bd808 moved this task from Backlog to Accepted on the Stashbot board.

Change 868735 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):

[labs/tools/stashbot@master] bot: Ignore Phabricator ids that are less than 3 digits

https://gerrit.wikimedia.org/r/868735

Change 868735 merged by jenkins-bot:

[labs/tools/stashbot@master] bot: Ignore Phabricator ids that are less than 3 digits

https://gerrit.wikimedia.org/r/868735

[22:29]  <    bd808> !log tools.stashbot Updated to 64a78ad (T325381)
[22:29]  < stashbot> Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stashbot/SAL
[22:29]  < stashbot> T325381: stashbot: timestamps in SAL messages can be interpreted as ticket links - https://phabricator.wikimedia.org/T325381
[22:30]  <    bd808> !log tools.stashbot testing: 2022-12-08-T11:00Z should not update any Phabricator tasks
[22:30]  < stashbot> Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stashbot/SAL