A separate list was also removed from restbase configuration in T316914: MWException: Error contacting the Parsoid/RESTBase server (HTTP 403): Rerenders for this article are blacklisted in the config from DiscussionTools – permalinks unavailable for some pages / https://github.com/wikimedia/restbase/pull/1305.
Both of those commits removed the entry for '/Commons:Featured_picture_candidates\//' on commons, but: when I request https://commons.wikimedia.org/api/rest_v1/page/html/Commons%3AFeatured_picture_candidates%2FFile%3AHalle_(Saale)_-_Landgericht_-_Treppenhaus_-_Decke_(2128).jpg?redirect=false with a 2.7.0 Accept header, I get a HTTP 403 with:
2023-03-25T20:15:07.107978Z DEBUG parsoid::api: req=Request { method: GET, url: Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Some(Domain("commons.wikimedia.org")), port: None, path: "/api/rest_v1/page/html/Commons%3AFeatured%20picture%20candidates%2FFile%3AHalle%20%28Saale%29%20-%20Landgericht%20-%20Treppenhaus%20-%20Decke%20%282128%29.jpg", query: Some("redirect=false"), fragment: None }, headers: {"accept": "text/html; charset=utf-8; profile=\"https://www.mediawiki.org/wiki/Specs/HTML/2.7.0\""} } 2023-03-25T20:15:07.815847Z DEBUG parsoid::api: resp=Response { url: Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Some(Domain("commons.wikimedia.org")), port: None, path: "/api/rest_v1/page/html/Commons%3AFeatured_picture_candidates%2FFile%3AHalle_(Saale)_-_Landgericht_-_Treppenhaus_-_Decke_(2128).jpg", query: Some("redirect=false"), fragment: None }, status: 403, headers: {"access-control-allow-origin": "*", "access-control-allow-methods": "GET,HEAD", "access-control-allow-headers": "accept, content-type, content-length, cache-control, accept-language, api-user-agent, if-match, if-modified-since, if-none-match, dnt, accept-encoding", "access-control-expose-headers": "etag", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "referrer-policy": "origin-when-cross-origin", "x-xss-protection": "1; mode=block", "content-security-policy": "default-src 'none'; frame-ancestors 'none'", "x-content-security-policy": "default-src 'none'; frame-ancestors 'none'", "x-webkit-csp": "default-src 'none'; frame-ancestors 'none'", "content-location": "https://commons.wikimedia.org/api/rest_v1/page/html/Commons%3AFeatured_picture_candidates%2FFile%3AHalle_(Saale)_-_Landgericht_-_Treppenhaus_-_Decke_(2128).jpg", "cache-control": "private, max-age=0, s-maxage=0, must-revalidate", "server": "restbase1033", "content-type": "application/problem+json", "content-length": "323", "date": "Sat, 25 Mar 2023 20:15:08 GMT", "age": "0", "x-cache": "cp1085 miss, cp1077 pass", "x-cache-status": "pass", "server-timing": "cache;desc=\"pass\", host;desc=\"cp1077\"", "strict-transport-security": "max-age=106384710; includeSubDomains; preload", "report-to": "{ \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }", "nel": "{ \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}", "x-client-ip": "74.71.26.214"} } {"type":"https://mediawiki.org/wiki/HyperSwitch/errors/bad_request#rerenders_disabled","method":"get","detail":"Rerenders for this article are blacklisted in the config.","uri":"/commons.wikimedia.org/v1/page/html/Commons%3AFeatured_picture_candidates%2FFile%3AHalle_(Saale)_-_Landgericht_-_Treppenhaus_-_Decke_(2128).jpg"}
So it's clearly still banned in the configuration somewhere, but where is it coming from? Why are pages still banned from being re-rendered?