The ConfirmEdit wiki page mentions Turnstile being available for MW equal to or higher to 1.41, but requiring usage of the master branch.
It seems that is not actually possible, as master has a MW 1.42 requirement (since before Turnstile was implemented as it seems) and when adjusting that and trying to use Turnstile, VisualEditor will throw a popup with "Missing Captcha" when trying to send a change.
I hence tried to just apply the changes in the Turnstile patches to the released ConfirmEdit, which does work fine for registration page, but breaks on Visual Editor. (The user that made the patch did note it was tested working in MW 1.40: https://phabricator.wikimedia.org/T319068#9218120)
Steps to replicate the issue (include links if applicable):
- Apply the Turnstile patches to ConfirmEdit for MW 1.41 (As of here: https://phabricator.wikimedia.org/T319068)
- Try to edit a page via visual editor and send your changes
- See the problem below
What happens?:
When trying to send a change via Visual Editor, the Cloudflare Captcha appears normally, but goes into a verification loop.
It shows "Verification", then "Success", then shows "Verification" again and then again "Success". That is repeated about ten times until a rate limit reached error appears and the page cannot be left anymore.
Note that it works fine on the registration page.
What should have happened instead?:
The captcha not going into a loop and allowing to send the change.
Software version (skip for WMF-hosted wikis like Wikipedia):
MediaWiki 1.41 with bundled ConfirmEdit and Turnstile patches applied
I can not confirm if it would work in master, but it seems like the change made for 1.40 is already broken for 1.41.
We have serious issues with spambot registrations and other Captchas aside of ReCaptcha v3 (which was only available via a custom solution from Mirazhe no longer working as of MW 1.41, as ConfirmEdit natively doesn't support it) are fully ineffective, including hCaptcha, hence this was something I looked forward to.
I understand if the issue can't be addressed due to not using MW 1.42, but maybe then at least the info on the wiki could be changed to say "MW >= 1.42".