Page MenuHomePhabricator

Disable installing a "block cookie" to a proxy-blocked anons in ruwiki
Closed, ResolvedPublic

Description

Ruwiki has consensus to disable a feature, described on T192017: Enable anon cookie blocking on all Wikimedia wikis. Reason: Russian authorities has blocked many big sites (but not wiki) and many people are working in Internet with permanently enabled proxy/VPN. When such person gets IP block, it sees "Disable your VPN" instruction, disables VPN, but is still blocked due to this cookie.

Local consensus: https://ru.wikipedia.org/wiki/Project:Форум/Технический#Отключить_в_нашем_разделе_механизм,_не_дающий_анрегам_править_даже_после_отключения_VPN

Looking on T196121: Enable set cookie with IP/IP-Range blocks when blocking logged-out users on itwiki, this feature can be disabled per site.

Event Timeline

Restricted Application added subscribers: Base, Aklapper. · View Herald Transcript
kostajh subscribed.

The feature flag in T196121: Enable set cookie with IP/IP-Range blocks when blocking logged-out users on itwiki was made a default option. When blocking a user, you need to uncheck the "Block the last IP address used by this account" option.

image.png (196×1 px, 34 KB)

Are you saying that you would prefer to have this checkbox disabled by default?

These are different things. You are talking about the situation when admin block a user and blocks also their IPs. This ticket is about the situation when a global admin or local admin blocks an entire IP range.

"Block the last IP address used by this account" option

That option does not apply to IP blocks, only accounts, and has nothing to do with cookies.

They are wanting to disable cookie blocks for IP blocks.

'wgCookieSetOnIpBlock' => [
	'default' => true,
	'ruwiki' => false,
],

"Block the last IP address used by this account" option

That option does not apply to IP blocks, only accounts, and has nothing to do with cookies.

They are wanting to disable cookie blocks for IP blocks.

'wgCookieSetOnIpBlock' => [
	'default' => true,
	'ruwiki' => false,
],

Right, thank you. (I was searching in operations/mediawiki-config rather than mediawiki/core when I thought this config had been removed in favor of a default.)

Superpes15 triaged this task as Medium priority.
Superpes15 moved this task from Backlog to Working on on the Wikimedia-Site-requests board.

Change #1223159 had a related patch set uploaded (by Superpes15; author: Superpes15):

[operations/mediawiki-config@master] [ruwiki] Disable setting a cookie for blocked anonymous users

https://gerrit.wikimedia.org/r/1223159

Change #1223159 merged by jenkins-bot:

[operations/mediawiki-config@master] [ruwiki] Disable setting a cookie for blocked anonymous users

https://gerrit.wikimedia.org/r/1223159

Mentioned in SAL (#wikimedia-operations) [2026-01-08T14:34:36Z] <mszwarc@deploy2002> Started scap sync-world: Backport for [[gerrit:1223155|[enwikiquote] Enable block feature for AbuseFilter (T413530)]], [[gerrit:1223159|[ruwiki] Disable setting a cookie for blocked anonymous users (T413737)]], [[gerrit:1224232|[enwikiquote] Add new autopatrolled and patroller usergroups (T413848)]]

Mentioned in SAL (#wikimedia-operations) [2026-01-08T14:36:48Z] <mszwarc@deploy2002> mszwarc, superpes: Backport for [[gerrit:1223155|[enwikiquote] Enable block feature for AbuseFilter (T413530)]], [[gerrit:1223159|[ruwiki] Disable setting a cookie for blocked anonymous users (T413737)]], [[gerrit:1224232|[enwikiquote] Add new autopatrolled and patroller usergroups (T413848)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified t

Mentioned in SAL (#wikimedia-operations) [2026-01-08T14:43:13Z] <mszwarc@deploy2002> Finished scap sync-world: Backport for [[gerrit:1223155|[enwikiquote] Enable block feature for AbuseFilter (T413530)]], [[gerrit:1223159|[ruwiki] Disable setting a cookie for blocked anonymous users (T413737)]], [[gerrit:1224232|[enwikiquote] Add new autopatrolled and patroller usergroups (T413848)]] (duration: 08m 36s)