Bug Tracker

#11482 closed bug (fixed)

Opened March 16, 2012 07:51PM UTC

Closed March 26, 2012 01:05AM UTC

[jQuery Bug Site] Hidden Spam Links (not comment spam)

Reported by: BrianMB Owned by:
Priority: high Milestone: None
Component: unfiled Version:
Keywords: Cc: danheberden
Blocked by: Blocking:
Description

There appear to hidden links in the jQuery template itself after bugs that have been closed. They are colored white so they blend in, and will not reveal themselves until you highlight the text.

Example

Screenshot: http://i.imgur.com/gwthK.png

Link: http://bugs.jquery.com/ticket/8744

More Info

  • These links only appear on bugs that have been closed
  • They seem to be for some kind of European or South American SMS sites
  • Text I content have seen includes "forfait sms illimite rio b and you imc" and "forfait b and youportabilite du numero"
Attachments (0)
Change History (4)

Changed March 16, 2012 07:58PM UTC by anonymous comment:1

In the wording above, I say "jQuery template," but more specifically I mean the "jQuery bug tracker template" of course. :P

Changed March 16, 2012 08:39PM UTC by fastfasterfastest comment:2

In the ticket you reference, http://bugs.jquery.com/ticket/8744, it says "Changed 7 days ago by jaudourg" and "Status changed from reopened to closed", then followed by the spam.

http://bugs.jquery.com/ticket/10944 is another ticket where it says "Changed 7 days ago by jaudourg" and "Status changed from reopened to closed", then followed by the spam.

http://bugs.jquery.com/ticket/8209 is yet another ticket where it says "Changed 7 days ago by jaudourg" and "Status changed from reopened to closed", then followed by the spam.

Note, jaudourg is different than jaubourg.

There are other instances too, though. http://bugs.jquery.com/ticket/4624: "Changed 3 days ago by gidson042" followed by "Status changed from reopened to closed", then followed by the spam.

Changed March 17, 2012 05:57PM UTC by dmethvin comment:3

cc: → danheberden
priority: undecided → high
status: new → open

Yes, someone thinks they are being clever. The problem is compounded by some email notification issues we're having. The "recently modified tickets" report makes it pretty easy to see though.

http://bugs.jquery.com/query?changetime=5daysago..&report=301&desc=1&order=changetime

First thing we need to do is get email notifications working right. Then we can just do a bulk delete on gidson042 and jaudourg.

Changed March 26, 2012 01:05AM UTC by mikesherov comment:4

resolution: → fixed
status: open → closed

I fixed this a few days ago. Thanks for reporting!