Last modified: 2013-07-15 16:45:21 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T53323, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 51323 - The default installation blocks edits containing certain words.
The default installation blocks edits containing certain words.
Status: RESOLVED INVALID
Product: Wikimedia
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: Unprioritized normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-07-14 14:57 UTC by a3829
Modified: 2013-07-15 16:45 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description a3829 2013-07-14 14:57:21 UTC
One of my MediaWiki installations is blocking edits containing certain words. It appears to be a spam filter of some kind, because it is blocking marketing words like "viagra." It also happens if there are more than three external links in a page. This is a simple installation, with most of the default options enabled, and no extensions installed. I didn't configure any spam filtering options. When I try to edit a page with a blocked word in it, I get a 301 redirect to the main page, but no error. The debug log shows the POST request containing the edit, and the redirect next, but it doesn't give any information as to what is causing the edit to be blocked. The same thing happens when attempting to preview an edit. I tried installing MediaWiki on a local server for testing, and it does not appear to be blocking any words. I read all of the spam filtering documentation and nothing claims to be enabled by default. This feature should be disabled by default, or it should be documented. There should also be some kind of error in the debug log. Are there any workarounds?
Comment 1 Jesús Martínez Novo (Ciencia Al Poder) 2013-07-14 15:04:26 UTC
It's a problem with your hosting provider. See this forum page:

http://www.mediawiki.org/wiki/Thread:Project:Support_desk/Page_wont_save_with_cimetidine
Comment 2 Platonides 2013-07-14 15:09:57 UTC
MediaWiki doesn't do that. These filtering is usually performed by a web server module or perhaps a firewall. You will need to determine what software is installed on the affected host that is doing it. A usual suspect is mod_security, although it tends to block technical keywords like SELECT, not spam words.

I'd appreciate if you can report here the guilty software after you encounter it, so we can better advice the next user bitten by it.

Good luck
Comment 3 a3829 2013-07-15 16:45:21 UTC
Thanks for the info. I thought that it might be server-side spam filtering right after I opened the bug. It turned out to be a mod_security rule. I had to contact support to have the rule disabled, as apparently AllowOverride is disabled for mod_security directives. Perhaps this issue should go in https://www.mediawiki.org/wiki/Manual:Errors_and_symptoms in case anyone else runs into the same problem?

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links