To help reduce abuse vectors for the intake endpoint, make sure that we reject:
See also T341261: Add report menu item to Minerva and Vector 2022 tools which would prevent the report menu item from appearing in blank pages.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T337566 [EPIC]: Incident Reporting System - Minimal Testable Product (MTP) | |||
| Declined | None | T347386 Don't allow submitting a report with revision ID 0 or with an empty page |
@kostajh, from my testing the API already rejects requests with the revisionId as 0 with the rest-nonexistent-revision error.
With the second point, perhaps the harassment could be blanking someone's user talk page?
Good point; maybe the rule should be to check if there has ever been content on that page?
I am declining this task. T348322: Set up anti abuse measures helps deal with the anti-abuse angles and as @Dreamy_Jazz noted, we are already rejecting requests where revision ID is 0. cc @Madalina @JSengupta-WMF in case you want to reopen this or add further clarification to the scenarios.