hypothesis / hypothesis/h

Search for annotations any *.wikidot.com page returns all annotations for all *.wikidot.com pages

Open
#2,921 2 comments 0 reactions 0 assignees View on GitHub
API bug
Dominant language
Python
Stars
3.2k
Forks
459
Avg merge
27d 1h
Merged PRs (30d)
1

Description

[wikidot](http://www.wikidot.com) serves wikis at `http://[wiki-name].wikidot.com` URLs. A search for annotations on any of these URLs returns all annotations for 'http://*.wikidot.com' pages.

Example query:
1. `curl 'https://hypothes.is/api/search?uri=http%3A%2F%2Fsandbox.wikidot.com%2F'`
2. Output: https://gist.github.com/robertknight/d882aef2cc9dce4fb284

Note that those annotations are all from different `http://[wiki-name].wikidot.com` pages.

This is happening because every wikidot page has a `` link in the ``.

Reported in https://hypothesis.zendesk.com/inbox/tickets/118

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by running the example curl request against the API search endpoint and compare annotations from different *.wikidot.com pages. Trace how the wikidot rel="alternate" application/wiki link affects URI matching, then verify that searching one wiki URL no longer returns annotations from other wiki pages.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api, backend, search
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.