On Wed, Sep 17, 2008 at 3:13 PM, Brion Vibber brion@wikimedia.org wrote:
<input type='hidden' value="+\" name="wpEditToken" />
Nothing fishy there -- the "+" are stuck on the edit token to help protect against bots which don't parse HTML correctly.
I've had to add & to that list. There's a bot out there that truncates pages containing &