Page MenuHomePhabricator

$wgMaxSigChars can be circumvented by using templates
Closed, DuplicatePublic


As reported at [$wgMaxSigChars?diff=568295] the setting introduced on r22960 (to fix bug 8458) do not consider the length of the substituted templates used in the signature, so although {{subst:<Very long template name>}} will be rejected if the template name has more than $wgMaxSigChars (-10) characters, {{subst:Main page}} will work even if the main page is a lot longer than $wgMaxSigChars.

The validation should be fixed to consider the length of the expanded (subst'ed) signature.

Version: unspecified
Severity: normal



Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 12:52 AM
bzimport set Reference to bz38974.
bzimport added a subscriber: Unknown Object (MLST).
  • This bug has been marked as a duplicate of bug 10715 ***