Page MenuHomePhabricator

If a template is deleted, the text is still shown
Closed, DuplicatePublic

Description

See also: 57991

If I create a template, and transclude it into a Flow post ({{template}}), and then delete the template, the text is still visible. This is an issue because there is no way to track template usage due to bug 58009.


Version: unspecified
Severity: enhancement
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=57991

Details

Reference
bz58012

Event Timeline

bzimport raised the priority of this task from to Normal.Nov 22 2014, 2:19 AM
bzimport set Reference to bz58012.
bzimport added a subscriber: Unknown Object (MLST).
Legoktm created this task.Dec 4 2013, 10:50 PM

bingle-admin wrote:

The WMF core features team tracks this bug on Mingle card https://mingle.corp.wikimedia.org/projects/flow/cards/583, but people from the community are welcome to contribute here and in Gerrit.

Dupe of bug 57512?

As described in bug 57512, this is the current intended behavior. A Flow post is a snapshot in history; editing or deleting a template in the template namespace days, months, or years later shouldn't change the way it looked at the time it was posted in a discussion.

If, during the course of beta-testing Flow, a critical use-case is discovered for this feature, we can reconsider it, but we're not going to build it out now.

(In reply to comment #3)

As described in bug 57512, this is the current intended behavior. A Flow post
is a snapshot in history; editing or deleting a template in the template
namespace days, months, or years later shouldn't change the way it looked at
the time it was posted in a discussion.

I think this creates a trivially exploitable attack vector. I did a bit of testing at [[Wikipedia talk:Flow/Developer test page]].

Quiddity removed a subscriber: Maryana.Dec 19 2014, 1:42 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 28 2015, 1:39 AM