Svoboda | Graniru | BBC Russia | Golosameriki | Facebook
BBC RussianHomePhabricator
Log In
Maniphest T328880

Clear abusive image from PagePreviews/Images on eswiki
Closed, ResolvedPublic

Description

Filing Task per mediawiki.org instructions.

Description

Screenshots

Popup&action=info
Sin título.png (682×1 px, 595 KB)
Sin título2.png (1×790 px, 728 KB)

Background
On January 28, 2023 the template Ficha de persona (infobox biography) was vandalised on the Spanish Wikipedia repeatedly (example; contents revdeleted). Among others, File:Handgun_collection.JPG was added to the source code of the template.

Since then, PageImages / Page-Previews is displaying that file, causing a number of reports on-wiki and elsewhere with some users feeling distressed about it.

In the meanwhile I've added the file to the on-wiki blacklist but at the time of this report this didn't solve the issue.

Looking at the mediawiki.org Extension page, it looks like the only way to purge an image from the popup is by adding/removing links to the concerned pages, but {{ficha de persona}} is used in more than 300,000 pages and as such this is not doable by hand. And since simply purging the page will not work (per mediawiki.org) running a bot to purge every page where the template is used will not help either.

Can you please assist us into fixing this issue?

Thank you.

Event Timeline

A null edit does fix it.

The data shown by the popups can be seen on https://es.wikipedia.org/api/rest_v1/page/summary/Jorge_Guillermo_I_de_Brandeburgo (kept broken on purpose)

The template was first vandalized on 2023-01-28 05:02 UTC, with reverts back and forth until 2023-01-28 06:13.

We would need to invalidate the caches that had been rendered in that timeframe for pages using ficha de persona.

After some scanning, out of 270975 articles using ficha de persona, only 264 have that bad image (< 0.1%).

A null edit does fix it.

The data shown by the popups can be seen on https://es.wikipedia.org/api/rest_v1/page/summary/Jorge_Guillermo_I_de_Brandeburgo (kept broken on purpose)

The template was first vandalized on 2023-01-28 05:02 UTC, with reverts back and forth until 2023-01-28 06:13.

We would need to invalidate the caches that had been rendered in that timeframe for pages using ficha de persona.

We did do a null edit on that template. Sadly it seems we still have some objects that weren't properly cleared from cache. So there is an additional bug on top of T271184#8585977 I would say. The null edit to the template solved the issue for a few test pages I used.

Cache should be cleared now for the rest of the pages.

Jgiannelos subscribed.

Closing this one after: T329532

Could someone document how the cache is cleared here so that in case of a more severe abuse any sysadmin could just do it?

We send a null edit to the template that regenerated the summary endpoint pages that transclude it.
In case of a single page, a purge event or a purge action would also trigger a pregeneration on the APIs.