On Sat, Jan 24, 2004 at 11:30:25AM -0800, Brion Vibber wrote:
On Jan 24, 2004, at 03:51, Timwi wrote:
If the bug is that the POST request just simply
accepts the
wgMinorEdit variable even for anonymous users, then it is pretty
trivial to exploit. Just add the checkbox to your edit screens using
something like Proxomitron.
Why do we remove the checkbox anyway? It's stupid, and I find it very
annoying when I happen to be making a quick edit while not logged in.
In fact I find it downright insulting that I'm not trusted to mark a
spelling correction as "minor" without logging in.
There are serious historical reasons for that. As in older wikis,
"minor" on Wikipedia used to mean "don't show in Recent Changes by
default".
Because of that, there was a lot of vandalism that went unnoticed.
So this was introduced as a quick fix. It was not stupid.