hCaptcha: PoC for hCaptcha on edits made through the MobileFrontend
Closed, ResolvedPublic1 Estimated Story Points
Actions

Assigned To

Authored By

	hector.arroyo
	Oct 9 2025, 11:24 AM

Description

Summary

MobileFrontend uses the API to edit
We need to implement the required changed to support loading hCaptcha in this context and trigger the required checks when an edit is made using the MobileFrontend.

Background

This is the follow-up of T405753: hCaptcha: Evaluate support for MobileFrontend; initial notes about what changes are likely needed may be found in a comment within that ticket: T405753#11236456

Acceptance criteria

An hCaptcha captcha check is triggered when the user edits a page using the mobile frontend
When the captcha is shown, the edit is not made unless the user correctly solves the captcha

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	DO NOT MERGE	mediawiki/extensions/MobileFrontend	master	+166 -23

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		In Progress		hector.arroyo	T407339 hCaptcha: Implement hCaptcha on edits made through the MobileFrontend
		Resolved		hector.arroyo	T406847 hCaptcha: PoC for hCaptcha on edits made through the MobileFrontend

Event Timeline

hector.arroyo created this task.Oct 9 2025, 11:24 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 9 2025, 11:24 AM

hector.arroyo renamed this task from {component}: {use imperative mood to describe desired outcome} to hCaptcha: Implement hCaptcha on edits made through the MobileFrontend.Oct 9 2025, 11:25 AM

hector.arroyo moved this task from Priority backlog to In progress on the Product Safety and Integrity (Sprint Apfel Strudel (Sep 29 - Oct 17)) board.

hector.arroyo added a project: WE4.2 Bot detection (WE4.2 hCaptcha editing trial).

hector.arroyo moved this task from Backlog to In progress on the WE4.2 Bot detection (WE4.2 hCaptcha editing trial) board.

hector.arroyo mentioned this in T405753: hCaptcha: Evaluate support for MobileFrontend.

A couple of notes:

let's scope the implementation to just our use case, which is invisible mode
we should display the privacy policy text / terms language, like we do on Special:CreateAccount, in the initial dialog after a user presses the "Save" button the first time.
we can load hCaptcha JS once a user interacts with the form (on focus)
In the first patch, we should only scope this to the source editor, the VisualEditor support can happen in a follow-up

Change #1196054 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/MobileFrontend@master] WiP

https://gerrit.wikimedia.org/r/1196054

gerritbot added a project: Patch-For-Review.Oct 14 2025, 12:35 PM

Change #1196056 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@master] WiP

https://gerrit.wikimedia.org/r/1196056

hector.arroyo set the point value for this task to 5.Oct 14 2025, 3:24 PM

I've submitted an initial, working implementation in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MobileFrontend/+/1196054 & https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1196056/9.

I'm now closing this task, renaming it to state that its purpose was to have a PoC implementation, then opening several 1-point tasks for which I'll fill smaller patches.

hector.arroyo added a parent task: Restricted Task.Oct 15 2025, 11:04 AM

hector.arroyo removed a parent task: Restricted Task.

hector.arroyo renamed this task from hCaptcha: Implement hCaptcha on edits made through the MobileFrontend to hCaptcha: PoC for hCaptcha on edits made through the MobileFrontend.Oct 15 2025, 11:07 AM

hector.arroyo changed the point value for this task from 5 to 1.

hector.arroyo added a parent task: T407339: hCaptcha: Implement hCaptcha on edits made through the MobileFrontend.Oct 15 2025, 11:11 AM

hector.arroyo moved this task from In progress to Done on the WE4.2 Bot detection (WE4.2 hCaptcha editing trial) board.Oct 16 2025, 1:43 PM

Change #1196054 abandoned by Harroyo-wmf:

[mediawiki/extensions/MobileFrontend@master] DO NOT MERGE