MobileFrontend hCaptcha: If a user clicks off the visual challenge during AbuseFilter consequence save, user cannot reopen the visual challenge or proceed with their edit
Closed, ResolvedPublicBUG REPORT
Actions

Assigned To

Authored By

	Dreamy_Jazz
	Apr 20 2026, 2:19 PM

Description

Summary

If a user sees a Bot detection and mitigation (WE4.2 hCaptcha editing trial) visual challenge in MobileFrontend and then click off that visual challenge, the user will be unable to proceed with their edit because the save button remains a spinning icon

Steps to reproduce

Create an AbuseFilter filter that has the showcaptcha consequence and can be triggered for a test edit
While logged out, make an edit using the mobilefrontend interface that triggers the AbuseFilter filter created above
Wait for the visual challenge to be shown
Click on outside the visual challenge to close it or wait for it to expire

What happens

Try to find a way to continue with the edit and see no way to continue, without closing the save dialog and reopening it

What should happen instead

The loading animation on the save button should be replaced with the save button again and the user should be able to press it again to proceed with their edit

Acceptance criteria

If a user clicks off the visual challenge, then the edit can still continue by pressing save again

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	hCaptcha: Open the summary screen if an AF-triggered captcha is closed	mediawiki/extensions/MobileFrontend	master	+142 -0
	hCaptcha: Open and close hooks, don't require a flag to load modules	mediawiki/extensions/ConfirmEdit	master	+67 -1

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		In Progress		hector.arroyo	T407339 hCaptcha: Implement hCaptcha on edits made through the MobileFrontend
		Resolved	BUG REPORT	hector.arroyo	T423878 MobileFrontend hCaptcha: If a user clicks off the visual challenge during AbuseFilter consequence save, user cannot reopen the visual challenge or proceed with their edit

Event Timeline

Dreamy_Jazz created this task.Apr 20 2026, 2:19 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 20 2026, 2:19 PM

Dreamy_Jazz edited projects, added Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)); removed Product Safety and Integrity.Apr 20 2026, 2:19 PM

Dreamy_Jazz moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)) board.

Dreamy_Jazz updated the task description. (Show Details)

hector.arroyo changed the task status from Open to In Progress.Apr 20 2026, 3:10 PM

hector.arroyo claimed this task.

hector.arroyo moved this task from Ready to In progress on the Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)) board.

hector.arroyo moved this task from Backlog to Bugs on the ConfirmEdit (CAPTCHA extension) board.

hector.arroyo moved this task from Untriaged to MobileFrontend (Editor) on the MobileFrontend board.

hector.arroyo edited projects, added MobileFrontend (MobileFrontend (Editor)); removed MobileFrontend.

hector.arroyo moved this task from Backlog to In progress on the Bot detection and mitigation (WE4.2 hCaptcha editing trial) board.

hector.arroyo added a parent task: T407339: hCaptcha: Implement hCaptcha on edits made through the MobileFrontend.

hector.arroyo renamed this task from MobileFrontend hCaptcha: If a user clicks of visual challenge during AbuseFilter consequence save, user cannot reopen the visual challenge or proceed with their edit to MobileFrontend hCaptcha: If a user clicks off the visual challenge during AbuseFilter consequence save, user cannot reopen the visual challenge or proceed with their edit.Apr 20 2026, 3:35 PM

Change #1275927 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Fire hooks on challenge open/close and always load MF module

https://gerrit.wikimedia.org/r/1275927

gerritbot added a project: Patch-For-Review.Apr 21 2026, 1:43 PM

Change #1275951 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/MobileFrontend@master] hCaptcha: Go back to summary screen when an AF-triggered captcha is closed

https://gerrit.wikimedia.org/r/1275951

hector.arroyo moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)) board.Apr 23 2026, 7:12 PM

hector.arroyo moved this task from Backlog to Triaged on the MobileFrontend (MobileFrontend (Editor)) board.

hector.arroyo moved this task from Bugs to Awaiting Code Review on the ConfirmEdit (CAPTCHA extension) board.

Change #1275927 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Open and close hooks, don't require a flag to load modules

https://gerrit.wikimedia.org/r/1275927

Change #1275951 merged by jenkins-bot:

[mediawiki/extensions/MobileFrontend@master] hCaptcha: Open the summary screen if an AF-triggered captcha is closed

https://gerrit.wikimedia.org/r/1275951

ReleaseTaggerBot added a project: MW-1.47-notes (1.47.0-wmf.1; 2026-05-05).Apr 29 2026, 2:00 PM

hector.arroyo moved this task from Awaiting Code Review to Bugs on the ConfirmEdit (CAPTCHA extension) board.Apr 29 2026, 2:23 PM

hector.arroyo moved this task from Needs review to QA in Prod on the Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)) board.

Maintenance_bot removed a project: Patch-For-Review.Apr 29 2026, 2:31 PM

@hector.arroyo Testing locally, after dismissing (either by clicking away or pressing esc) the challenge and being returned to the edit summary page, clicking the Save/Publish button does not seem to do anything. I see some calls to hCaptcha being made but nothing appears on screen (perhaps it is hidden?)

OKryva-WMF edited projects, added Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)); removed Product Safety and Integrity (Sprint Tulip (Apr 13 - May 1)).May 1 2026, 7:42 AM

OKryva-WMF moved this task from Backlog to QA in Prod on the Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)) board.May 1 2026, 7:42 AM

I've just double-checked how the MobileFrontend behaves when an AbuseFilter triggers the captcha consequence and I was able to close the challenge various times, and then I was able to solve the captcha and save the edit.

Tested with the current master branches of MobileFrontend and ConfirmEdit.

hector.arroyo moved this task from In progress to Done on the Bot detection and mitigation (WE4.2 hCaptcha editing trial) board.May 6 2026, 8:47 AM

	F79908755: T423878-qa.mp4
	May 6 2026, 8:46 AM

	F78702794: dismiss_mfse.webm
	Apr 29 2026, 3:06 PM

MobileFrontend hCaptcha: If a user clicks off the visual challenge during AbuseFilter consequence save, user cannot reopen the visual challenge or proceed with their editClosed, ResolvedPublicBUG REPORTActions