From the parent task:
Temporary users should be blocked if their IP address is listed in $wgDnsBlacklistUrls or $wgSoftBlockRanges.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Ensure temporary users are blocked by configured IP blocks | Tchanders | mediawiki/core | master | +38 -5 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | kostajh | T294511 2021 Security Team wikireplicas audit | |||
| Declined | None | T284948 Raw IPs of logged-out users disclosed in wiki-replicas | |||
| Resolved | • Niharika | T324492 Temporary accounts - MVP | |||
| Resolved | Madalina | T326816 [Epic] Update features for temporary accounts | |||
| Resolved | Madalina | T331637 Update features in MediaWiki core for IP Masking | |||
| Resolved | Tchanders | T338836 How should blocks treat temporary users? | |||
| Resolved | Tchanders | T343704 Ensure temporary users are blocked by configured IP blocks |
Event Timeline
Comment Actions
Change 946536 had a related patch set uploaded (by Tchanders; author: Tchanders):
[mediawiki/core@master] Ensure temporary users are blocked by configured IP blocks
Comment Actions
Change 946536 merged by jenkins-bot:
[mediawiki/core@master] Ensure temporary users are blocked by configured IP blocks
Comment Actions
I checked that $wgDnsBlacklistUrls and $wgSoftBlockRanges block IPs and temporary users doing various different actions.
I also tested them alongside other types of blocks (e.g. database, global) to test composite blocks.
I also tested database and global blocks on beta for regression purposes.
Test environment: local docker MediaWiki 1.41.0-alpha (af6440a) 06:52, 14 August 2023.