Page MenuHomePhabricator
Create Task
Maniphest T426126

Implement CAPTCHA support in the Upload Wizard
Open, Needs TriagePublic
Actions

Description

Summary

We should implement support for ConfirmEdit (CAPTCHA extension) CAPTCHAs into the UploadWizard so that on WMF wikis we can verify file uploads using hCaptcha

Background

  • UploadWizard currently has no support for CAPTCHAs in the file upload process
  • We should allow CAPTCHAs to be shown for a file upload so that bots cannot spam upload files
    • On WMF wikis we would like to add hCaptcha into the file upload process to reduce bot spam and flag uploads that may have been performed by an unapproved bot

Acceptance criteria

  • Uploads using the UploadWizard support CAPTCHAs when required

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
UploadWizard: Auto-resubmit when CAPTCHA silently re-validatesmediawiki/extensions/UploadWizardmaster+70 -15
UploadWizard: Handle CAPTCHA challenges in publish flowmediawiki/extensions/UploadWizardmaster+969 -40
UploadWizard: Activate publish-captcha hook and eager promptmediawiki/extensions/UploadWizardmaster+135 -2
UploadWizard: Add PublishCaptchaHandler class (unregistered)mediawiki/extensions/UploadWizardmaster+367 -0
zuul: [mediawiki/extensions/UploadWizard] Add ConfirmEdit depintegration/configmaster+2 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

Dreamy_Jazz created this task.Tue, May 12, 9:54 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptTue, May 12, 9:54 PM
Dreamy_Jazz added a project: Epic.Tue, May 12, 9:54 PM
Dreamy_Jazz created subtask T426127: Allow ConfirmEdit to trigger for file uploads.Tue, May 12, 9:59 PM
Dreamy_Jazz mentioned this in T426127: Allow ConfirmEdit to trigger for file uploads.
Dreamy_Jazz added a project: ConfirmEdit (CAPTCHA extension).
Dreamy_Jazz edited projects, added Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)); removed Product Safety and Integrity.
kostajh moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)) board.Wed, May 13, 11:51 AM
MPostoronca-WMF claimed this task.Fri, May 15, 12:57 PM
MPostoronca-WMF moved this task from Ready to In progress on the Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)) board.
gerritbot added a comment.Tue, May 19, 12:55 PM

Change #1289341 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/UploadWizard@master] UploadWizard: Implement CAPTCHA support for file publishing

https://gerrit.wikimedia.org/r/1289341

gerritbot added a project: Patch-For-Review.Tue, May 19, 12:55 PM
OKryva-WMF edited projects, added Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)); removed Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)).Mon, May 25, 12:41 PM
OKryva-WMF moved this task from Backlog to In progress on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Mon, May 25, 12:42 PM
MPostoronca-WMF moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Wed, May 27, 10:53 AM
OKryva-WMF moved this task from Needs review to In progress on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Thu, May 28, 11:49 AM
gerritbot added a comment.Thu, May 28, 3:20 PM

Change #1295035 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[integration/config@master] CI: Add ConfirmEdit dependency for UploadWizard

https://gerrit.wikimedia.org/r/1295035

gerritbot added a comment.Thu, May 28, 4:13 PM

Change #1289341 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/UploadWizard@master] UploadWizard: Implement CAPTCHA support for file publishing

https://gerrit.wikimedia.org/r/1289341

gerritbot added a comment.Fri, May 29, 8:42 AM

Change #1295035 merged by jenkins-bot:

[integration/config@master] zuul: [mediawiki/extensions/UploadWizard] Add ConfirmEdit dep

https://gerrit.wikimedia.org/r/1295035

gerritbot added a comment.Wed, Jun 3, 2:58 PM

Change #1297170 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/UploadWizard@master] UploadWizard: Add PublishCaptchaHandler class (unregistered)

https://gerrit.wikimedia.org/r/1297170

gerritbot added a comment.Wed, Jun 3, 2:58 PM

Change #1297171 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/UploadWizard@master] UploadWizard: Handle CAPTCHA challenges in publish flow

https://gerrit.wikimedia.org/r/1297171

gerritbot added a comment.Wed, Jun 3, 10:00 PM

Change #1297170 merged by jenkins-bot:

[mediawiki/extensions/UploadWizard@master] UploadWizard: Add PublishCaptchaHandler class (unregistered)

https://gerrit.wikimedia.org/r/1297170

ReleaseTaggerBot added a project: MW-1.47-notes (1.47.0-wmf.6; 2026-06-09).Wed, Jun 3, 11:00 PM
gerritbot added a comment.Thu, Jun 4, 10:25 AM

Change #1297645 had a related patch set uploaded (by Mpostoronca; author: Mpostoronca):

[mediawiki/extensions/UploadWizard@master] UploadWizard: Auto-resubmit when CAPTCHA silently re-validates

https://gerrit.wikimedia.org/r/1297645

Dreamy_Jazz moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Thu, Jun 4, 9:21 PM

(assuming this should be in the 'Needs review' column)

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits