On Jan 24, 2004, at 03:51, Timwi wrote:
If the bug is that the POST request just simply accepts the wgMinorEdit variable even for anonymous users, then it is pretty trivial to exploit. Just add the checkbox to your edit screens using something like Proxomitron.
Why do we remove the checkbox anyway? It's stupid, and I find it very annoying when I happen to be making a quick edit while not logged in.
In fact I find it downright insulting that I'm not trusted to mark a spelling correction as "minor" without logging in.
-- brion vibber (brion @ pobox.com)