Allow ConfirmEdit to trigger for file uploads
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Dreamy_Jazz
	May 12 2026, 9:59 PM

Project Tags

Referenced Files

None

Subscribers

Aklapper

Dreamy_Jazz

Soda

Description

Summary

ConfirmEdit (CAPTCHA extension) does not currently have the ability to show a CAPTCHA during a file upload. This should be added to support T426126: Implement CAPTCHA support in the Upload Wizard

Background

ConfirmEdit (CAPTCHA extension) currently lacks the ability to show CAPTCHA for a file upload
- We want to on WMF wikis have hCaptcha be present for files uploaded using the UploadWizard
This task focuses on adding the ability to require a CAPTCHA to upload a file
- A failed solve of the CAPTCHA should block the upload along with the associated edits performed during an upload
- A successful solve of the CAPTCHA should allow the upload along with any associated edits performed during an upload

Acceptance criteria

It is possible to trigger a CAPTCHA during a file upload
A failed CAPTCHA solve during a file upload blocks the uploading of the file and any associated edits
A successful CAPTCHA solve during a file upload allows the file to be uploaded along with any edits made as part of the upload

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		MPostoronca-WMF	T426126 Implement CAPTCHA support in the Upload Wizard
		Open		None	T426127 Allow ConfirmEdit to trigger for file uploads

Event Timeline

Dreamy_Jazz created this task.May 12 2026, 9:59 PM

Dreamy_Jazz added a project: ConfirmEdit (CAPTCHA extension).

Dreamy_Jazz edited projects, added: Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)); removed: Product Safety and Integrity.

Dreamy_Jazz moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)) board.

Maintenance_bot added a project: Commons.May 12 2026, 10:30 PM

@Dreamy_Jazz I think an important question to ask is at what stage do y'all expect to trigger this? Do we want to prevent the file from reaching WMF servers at all? (in which case we should trigger it before the UploadStash step) Or do we want to just prevent on-wiki uploads? (i.e., trigger it at the last step). My personal vote (from a usability POV) is for the former since that is early in the workflow, and it is easier for somebody to restart the flow completely.

OKryva-WMF edited projects, added: Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)); removed: Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)).Mon, May 25, 12:42 PM

OKryva-WMF moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Mon, May 25, 12:42 PM

kostajh moved this task from Ready to Epics in progress on the Product Safety and Integrity (Sprint Iris (May 25 - Jun 12)) board.Wed, Jun 10, 11:53 AM

Allow ConfirmEdit to trigger for file uploadsOpen, Needs TriagePublicActions