Page MenuHomePhabricator

If a block log reason was rev-deleted, it is still visible for all admins in [[Special:Block]]
Closed, ResolvedPublic


If a user is blocked with the "Hide username from edits and lists" option selected, and another administrator attempted to reblock the same user, then the block reason was shown to the second administrator even if they lacked the hideuser right.

This was fixed in the attached patch, to be included with the release of MediaWiki 1.19.2 and 1.18.5.

Administrators are advised to avoid placing private data in block reasons. If a block reason does contain private data, the user should be reblocked with a non-private block reason and the original log entry suppressed.

Version: 1.19.1
Severity: normal



Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 12:52 AM
bzimport set Reference to bz39823.
bzimport added a subscriber: Unknown Object (MLST).

Created attachment 11042
Patch for 1.18 branch


  • Bug 35839 has been marked as a duplicate of this bug. ***