Last modified: 2014-02-12 23:48:04 UTC
1. Go to a page and click the main edit button. 2. Log in using the CTA link. 3. Click cancel in the tutorial. 4. Log out and click the "Return to page_name" link. 5. You're back on the page, logged out and with the tutorial visible.
It will do since the login/logout urls pass all existing query string parameters. We probably want to whitelist the ones that we need...
Or you can simply not run the whole tutorial code if the user is logged out.
That's true :)
Change 82764 had a related patch set uploaded by JGonera: Don't show newbie tutorials after logging out https://gerrit.wikimedia.org/r/82764
Change 82764 merged by jenkins-bot: Don't show newbie tutorials after logging out https://gerrit.wikimedia.org/r/82764