Lucas_Werkmeister_WMDE added a comment.
> is it possible for people to add the Wikidata Bridge tag manually tag to any edit? Yes, and also to any log entry. This is because it’s a user-defined tag, and not an extension-defined tag. > if so, do we want to prevent this, and how? I don’t think there’s a good way for us to prevent this – the Wikidata Bridge JavaScript running on the client wiki is not inherently any more trusted than other JavaScript (gadgets, user scripts), there’s no way for the repo wiki to tell whether an API call came from the Data Bridge or from some other source. We could probably register some code in Wikibase Repo to only allow applying the tag on entity pages, or only with the wbeditentity API action, or something similar, but I feel like that will only make abuse of the tag harder to detect – at least at the moment, it’s fairly easy to identify that talk page edit as spam. > is it technically possible that someone would use the Bridge feature for other purposes (eg create a new item or add a message on a talk page)? I don’t see how, no. TASK DETAIL https://phabricator.wikimedia.org/T261102 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Lucas_Werkmeister_WMDE Cc: Lucas_Werkmeister_WMDE, WMDE-leszek, darthmon_wmde, Michael, Lydia_Pintscher, Lea_Lacroix_WMDE, Aklapper, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Scott_WUaS, abian, Wikidata-bugs, aude, Mbch331
_______________________________________________ Wikidata-bugs mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
