https://bugzilla.wikimedia.org/show_bug.cgi?id=60309

       Web browser: ---
            Bug ID: 60309
           Summary: Flow: new-topic should fail on page that isn't a Flow
                    board
           Product: MediaWiki extensions
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: Unprioritized
         Component: Flow
          Assignee: wikibugs-l@lists.wikimedia.org
          Reporter: sp...@wikimedia.org
                CC: ebernhard...@wikimedia.org, oke...@wikimedia.org,
                    pandiculat...@gmail.com, sp...@wikimedia.org
    Classification: Unclassified
   Mobile Platform: ---

As in bug 60218. Go to [[mw:Special:ApiSandbox]]:
* action=flow
* page= page you want to blank, one that isn't a Flow board.
* params={"topic_list": {"topic": "Topic!", "content": "Content!"}}
* token=Flow token from API (request tokens type 'flow'), +\ if you're logged
out

Press Make request, and the page will be replaced with the string: "This talk
page has been taken over by a
[https://www.mediawiki.org/wiki/Special:MyLanguage/Flow_Portal Flow board]."
The API request returns success and includes the chunk of HTML for the new
topic.

But the page isn't a Flow board! The API request should fail.
onPerformAction checks isTalkpageOccupied but returns true if it isn't, and
maybe the API should be checking too before it calls ensureFlowRevision().

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to