The CentralAuth part seems fine - the editcount is tracked in the DB, the account is attached.

I think the warning is a bit misleading because it does not concern only variables from extensions. I tried to explain this in T102944#8823633:

In T102944#8823633, @matej_suchanek wrote:

We already store some variables when a filter is triggered and an entry in the abuse log is made. But only those variables that were needed and actually computed during execution (see VariablesBlobStore.php).

In T382292#10410556, @matej_suchanek wrote:

The code path executed should be the same.

I don't think so. examine uses edits made, AbuseLog not if edit was blocked. See the warning on https://www.mediawiki.org/wiki/Extension:AbuseFilter/Rules_format#Variables_from_other_extensions - i think this is the problem.

It seems to work when using the testing interface: https://www.wikidata.org/w/index.php?title=Special:AbuseFilter/examine/2357061929&testfilter=global_user_editcount. The code path executed should be the same. I am not quite sure what the problem is. Perhaps the context user is not set correctly during delivery?

I used to be in favor of bots having sboverride, but I've now come to agree with Beetstra.

IMHO, having blacklisted links on wikipedia does pose problems. I therefore think that having bots being able to (mass) post blacklisted links is an issue. If those links end up in mainspace it may hamper vandalism fighting, it hampers manual archiving on talkpages.

MediaWiki message delivery has the sboverride right on all WMF wikis, which is how it bypasses the blacklist.

Change #1093472 merged by jenkins-bot:

[mediawiki/extensions/MassMessage@master] Implicitly invalidate the urltodb cache when the wiki list changes

https://gerrit.wikimedia.org/r/1093472

Change #1093472 had a related patch set uploaded (by Tim Starling; author: Tim Starling):

[mediawiki/extensions/MassMessage@master] Implicitly invalidate the urltodb cache when the wiki list changes

https://gerrit.wikimedia.org/r/1093472

In T245337#10330967, @Samwalton9-WMF wrote:

@Sjoerddebruin just encountered this trying to sign up Wikipedia:[email protected].

@Sjoerddebruin just encountered this trying to sign up Wikipedia:[email protected].

Change #1079031 had a related patch set uploaded (by Jdlrobson; author: Jdlrobson):

[mediawiki/extensions/ParserMigration@master] Use newer messageBox function

https://gerrit.wikimedia.org/r/1079031

Change #1078974 merged by jenkins-bot:

[mediawiki/extensions/MassMessage@master] Simplify MassMessage warning

https://gerrit.wikimedia.org/r/1078974

Change #1078974 merged by jenkins-bot:

[mediawiki/extensions/MassMessage@master] Simplify MassMessage warning

https://gerrit.wikimedia.org/r/1078974

Change #1078974 had a related patch set uploaded (by Jdlrobson; author: Jdlrobson):

[mediawiki/extensions/MassMessage@master] Simplify MassMessage warning

https://gerrit.wikimedia.org/r/1078974

Change #1078974 had a related patch set uploaded (by Jdlrobson; author: Jdlrobson):

[mediawiki/extensions/MassMessage@master] Simplify MassMessage warning

https://gerrit.wikimedia.org/r/1078974

Thanks! I've untagged GrowthExperiments so feel free to unsubscribe!

In T375902#10203651, @Jdlrobson wrote:

In T375902#10188282, @Sgs wrote:

Some code relies on finding message boxes by class name, eg: ConfirmEmail.js. Is there a non-Codex class that we could use for this? And if not, can we add one?

@Sgs the Html::messageBox class does support the addition of a custom className - so you'd need to add it there (this would be a non-Codex class). For JS you can add a class by doing the following:

const warning = mw.util.messageBox('my warning', 'warning' );
warning.classList.add( 'mywarningclass' );

Change #1078364 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] refactor(SpecialManageMentors): avoid using Codex classes

https://gerrit.wikimedia.org/r/1078364

Change #1078359 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] refactor(ConfirmEmail): avoid using Codex classes

https://gerrit.wikimedia.org/r/1078359

Change #1078364 had a related patch set uploaded (by Sergio Gimeno; author: Sergio Gimeno):

[mediawiki/extensions/GrowthExperiments@master] refactor(SpecialManageMentors): avoid using Codex classes

https://gerrit.wikimedia.org/r/1078364

Change #1078359 had a related patch set uploaded (by Sergio Gimeno; author: Sergio Gimeno):

[mediawiki/extensions/GrowthExperiments@master] refactor(ConfirmEmail): avoid using Codex classes

https://gerrit.wikimedia.org/r/1078359

In T375902#10188282, @Sgs wrote:

Some code relies on finding message boxes by class name, eg: ConfirmEmail.js. Is there a non-Codex class that we could use for this? And if not, can we add one?

Change #1076791 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] refactor(ConfirmEmail): use mw.util.messageBox

https://gerrit.wikimedia.org/r/1076791

Change #1076247 merged by jenkins-bot:

[mediawiki/extensions/MassMessage@master] Improve error logentry when subject section is invalid

https://gerrit.wikimedia.org/r/1076247

Change #1076791 had a related patch set uploaded (by Sergio Gimeno; author: Sergio Gimeno):

[mediawiki/extensions/GrowthExperiments@master] refactor(ConfirmEmail): use mw.util.messageBox

https://gerrit.wikimedia.org/r/1076791

Some code relies on finding message boxes by class name, eg: ConfirmEmail.js. Is there a non-Codex class that we could use for this? And if not, can we add one?