See also: 57991
If I create a template, and transclude it into a Flow post ({{template}}), and then delete the template, the text is still visible. This is an issue because there is no way to track template usage due to bug 58009.
Version: unspecified
Severity: enhancement
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=57991
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • Springle | T58506 enable Flow extension on test2 and a handful of mediawiki.org pages | |||
| Duplicate | None | T60012 If a template is deleted, the text is still shown | |||
| Duplicate | None | T60009 Flow does not create link table entries for transcluded templates or wikilinks |
bingle-admin wrote:
The WMF core features team tracks this bug on Mingle card https://mingle.corp.wikimedia.org/projects/flow/cards/583, but people from the community are welcome to contribute here and in Gerrit.
As described in bug 57512, this is the current intended behavior. A Flow post is a snapshot in history; editing or deleting a template in the template namespace days, months, or years later shouldn't change the way it looked at the time it was posted in a discussion.
If, during the course of beta-testing Flow, a critical use-case is discovered for this feature, we can reconsider it, but we're not going to build it out now.
(In reply to comment #3)
As described in bug 57512, this is the current intended behavior. A Flow post
is a snapshot in history; editing or deleting a template in the template
namespace days, months, or years later shouldn't change the way it looked at
the time it was posted in a discussion.
I think this creates a trivially exploitable attack vector. I did a bit of testing at [[Wikipedia talk:Flow/Developer test page]].