Hide the target of autoblocks in the 'globalblocks' API
Closed, ResolvedPublic2 Estimated Story Points
Actions

Description

The globalblocks query API allows users to fetch a list of active global blocks. Currently, this does not hide the target of the global block if the target is an autoblock. This should be hidden to protect the privacy of users who have been blocked.

Acceptance criteria

The globalblocks query API does not display the target of autoblocks, or allow querying for autoblocks based on an IP (to prevent working out the target through trial and error).

Details

	Subject	Repo	Branch	Lines +/-
	Update 'globalblocks' API to hide global autoblock targets	mediawiki/extensions/GlobalBlocking	master	+117 -22

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
		Restricted Task
Resolved	kostajh	T294511 2021 Security Team wikireplicas audit
Declined	None	T284948 Raw IPs of logged-out users disclosed in wiki-replicas
In Progress	Niharika	T324492 Temporary accounts - MVP
Open	None	T326816 [Epic] Update features for temporary accounts
Open	Dreamy_Jazz	T355286 [Epic] Globally blocking a temporary account should prevent further account creations
Resolved	Dreamy_Jazz	T368949 [Epic] Implement global autoblocks from global user blocks
Resolved	Dreamy_Jazz	T377230 Update GlobalBlocking interfaces to properly handle global autoblocks
Resolved	Dreamy_Jazz	T376750 Hide the target of autoblocks in the 'globalblocks' API

Event Timeline

Dreamy_Jazz created this task.Oct 8 2024, 6:47 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 8 2024, 6:47 PM

Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Cello (Oct 7 - 18)) board.Oct 8 2024, 6:47 PM

Dreamy_Jazz moved this task from Backlog to In progress on the Temporary accounts (Blockers to minor pilot wiki deployment) board.

Change #1078731 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/GlobalBlocking@master] [WIP] Update 'globalblocks' API to appropriately hide autoblocks

https://gerrit.wikimedia.org/r/1078731

gerritbot added a project: Patch-For-Review.Oct 8 2024, 6:48 PM

Dreamy_Jazz moved this task from In Progress to Needs review on the Trust and Safety Product Sprint (Sprint Cello (Oct 7 - 18)) board.Oct 11 2024, 5:12 PM

Dreamy_Jazz mentioned this in T377034: Update Special:GlobalBlockList to properly hide the targets of global autoblocks.Oct 11 2024, 5:51 PM

Dreamy_Jazz edited parent tasks, added: T377230: Update GlobalBlocking interfaces to properly handle global autoblocks; removed: T368949: [Epic] Implement global autoblocks from global user blocks.Oct 15 2024, 2:55 PM

Dreamy_Jazz set the point value for this task to 2.Oct 16 2024, 8:21 PM

Change #1078731 merged by jenkins-bot:

[mediawiki/extensions/GlobalBlocking@master] Update 'globalblocks' API to hide global autoblock targets

https://gerrit.wikimedia.org/r/1078731

Maintenance_bot removed a project: Patch-For-Review.Oct 17 2024, 10:30 AM

ReleaseTaggerBot added a project: MW-1.43-notes (1.43.0-wmf.28; 2024-10-22).Oct 17 2024, 11:00 AM

Dreamy_Jazz moved this task from Needs review to Needs QA on the Trust and Safety Product Sprint (Sprint Cello (Oct 7 - 18)) board.Oct 17 2024, 12:23 PM

Dreamy_Jazz mentioned this in T377754: Hide global autoblocks in the 'globalblocks' list API on WMF wikis until callers have updated their code.Oct 21 2024, 4:44 PM

kostajh edited projects, added Trust and Safety Product Sprint (Sprint Accordion October 28 - November 15); removed Trust and Safety Product Sprint (Sprint Cello (Oct 7 - 18)).Mon, Oct 28, 11:05 AM

kostajh moved this task from Priority Backlog to Needs QA on the Trust and Safety Product Sprint (Sprint Accordion October 28 - November 15) board.

I have not observed any global autoblock which includes the target.

Further testing of this will be done in T377855.

kostajh closed this task as Resolved.Mon, Oct 28, 11:44 AM

Hide the target of autoblocks in the 'globalblocks' APIClosed, ResolvedPublic2 Estimated Story PointsActions