Community Wishlist Survey 2022/Anti-harassment/Add variables in AbuseFilter to detect/block thanks

Random proposal ►◄ Anti-harassment The survey has concluded. Here are the results!

Add variables in AbuseFilter to detect/block thanks

Problem: There is no way in AbuseFilter to detect uses of the "thanks" feature. This feature can be abused in order to harass editors. It is possible to mute a spectific account, but when the harasser uses a lot of accounts, the editor targeted by harasser has no other choice than disabling the whole thanks feature.
Proposed solution: Create thanks feature related variables, which could be "thanks sender username" and "thanks recipient username" for example.
Who would benefit: AbuseFilter editors, harassed editors
More comments:
Phabricator tickets: phab:T235873
Proposer: — Jules* ^Talk 10:14, 23 January 2022 (UTC)[reply]

Discussion

Erratum: I wrote in the proposal that variables "could be thanks sender username and thanks recipient username". We already have a user_name variable in AbuseFilter (for the user who does the action), so we only need a thanked user variable. This would allow to prevent harassment using thanks feature. — Jules* ^Talk 09:34, 30 January 2022 (UTC)[reply]

How are users harassed using the thanks feature? Just curious. AWESOMEDUDE0614 (talk) 16:17, 31 January 2022 (UTC)[reply]
Multiple accounts (sometimes with identity theft, insults, threats, etc. in their username) are created to thank multiple times an editor. — Jules* ^Talk 13:06, 1 February 2022 (UTC)[reply]
For clarification: spamming notifications. ~~~~
User:1234qwer1234qwer4 (talk) 19:35, 7 February 2022 (UTC)[reply]

Voting

Support KylieTastic (talk) 19:15, 28 January 2022 (UTC)[reply]
Support CrystalLemonade (talk) 19:40, 28 January 2022 (UTC)[reply]
Support Not sure if AbuseFilter is right tool for this, but thanks-spam should be handled somehow Zache (talk) 20:43, 28 January 2022 (UTC)[reply]
Support Using 'thanks' feature was a mean of harassment in pl.wiki before. Something should be done to limit the possibility of using this feature to harass other users. Wostr (talk) 20:46, 28 January 2022 (UTC)[reply]
Support — Draceane ^talk_contrib. 22:57, 28 January 2022 (UTC)[reply]
Support --𝑇𝑚𝑣 (𝑡𝑎𝑙𝑘) 00:42, 29 January 2022 (UTC)[reply]
Support Lectrician1 (talk) 01:56, 29 January 2022 (UTC)[reply]
Support Aca (talk) 12:08, 29 January 2022 (UTC)[reply]
Support Thingofme (talk) 14:04, 29 January 2022 (UTC)[reply]
Support BSMIsEditing (talk) 15:00, 29 January 2022 (UTC)[reply]
Support NguoiDungKhongDinhDanh 15:10, 29 January 2022 (UTC)[reply]
Support Ali Imran Awan (talk) 07:09, 30 January 2022 (UTC)[reply]
Support —— Eric Liu_（Talk） 07:51, 30 January 2022 (UTC)[reply]
Support A09090091 (talk) 07:57, 30 January 2022 (UTC)[reply]
Support Also blocking "thanks" in the block options could be useful for those users that abuse it. Ruthven (msg) 15:02, 30 January 2022 (UTC)[reply]
Support Titore (talk) 17:01, 30 January 2022 (UTC)[reply]
Support KevinL (aka L235 · t) 20:48, 30 January 2022 (UTC)[reply]
Support I noticed this about the "thanks" feature a while back -- it seems like you can just send an arbitrary number of them to someone, with nothing beyond a rudimentary ratelimit, and I don't think there is any way for someone to block them (aside from disabling the feature entirely, I think). They're great, and they have improved my editing experience, but I think that this vulnerability should be fixed. JPxG (talk) 00:26, 31 January 2022 (UTC)[reply]
@JPxG As stated in the description, muting the account sending the thanks from your preferences will stop the notifications. ~~~~
User:1234qwer1234qwer4 (talk) 22:47, 9 February 2022 (UTC)[reply]
Support Trizek ^{from FR} 11:56, 31 January 2022 (UTC)[reply]
Support Dreamy Jazz ^{talk to me | enwiki} 14:21, 31 January 2022 (UTC)[reply]
Support Sargento - A sus órdenes 21:08, 31 January 2022 (UTC)[reply]
Support H78c67c (talk) 04:18, 1 February 2022 (UTC)[reply]
Support LD (talk) 13:02, 1 February 2022 (UTC)[reply]
Support Thanks, EDG 543 (message me) 14:31, 1 February 2022 (UTC)[reply]
Support LTAs clearly abuse this feature. Thibaut (talk) 15:47, 1 February 2022 (UTC)[reply]
Support --Andriy.v (talk) 23:51, 1 February 2022 (UTC)[reply]
Support ~ Amory (u • t • c) 20:38, 2 February 2022 (UTC)[reply]
Support DannyS712 (talk) 03:05, 3 February 2022 (UTC)[reply]
Support Bibeyjj (talk) 20:06, 4 February 2022 (UTC)[reply]
Support - Darwin ^Ahoy! 21:31, 4 February 2022 (UTC)[reply]
Support paul2520 (talk) 02:31, 5 February 2022 (UTC)[reply]
Support Java Hurricane 10:39, 5 February 2022 (UTC)[reply]
Support —Thanks for the fish! ^{talk•contrib} (he/him) 17:35, 5 February 2022 (UTC)[reply]
Support Ayumu Ozaki (talk) 03:02, 6 February 2022 (UTC)[reply]
Support --Liuxinyu970226 (talk) 03:41, 6 February 2022 (UTC)[reply]
Support Estoy de acuerdo con la propuesta Windows 77770 (talk) 02:46, 7 February 2022 (UTC)[reply]
Support Untitled.docx (talk) 15:25, 7 February 2022 (UTC)[reply]
Support Em-mustapha ^talk 17:47, 7 February 2022 (UTC)[reply]
Support ruwiki has an advanced bot to automatically block accounts abusing this feature, but having this as an AbuseFilter action would be way easier. (There might be more actions that would be useful if added to the extension.) ~~~~
User:1234qwer1234qwer4 (talk) 19:41, 7 February 2022 (UTC)[reply]
Support ~Cybularny ^Speak? 20:01, 7 February 2022 (UTC)[reply]
Support Barkeep49 (talk) 22:28, 7 February 2022 (UTC)[reply]
Support KnowledgeablePersona (talk) 23:20, 8 February 2022 (UTC)[reply]
Support — Bilorv (talk) 12:17, 9 February 2022 (UTC)[reply]
Support Juan90264 (talk) 13:51, 9 February 2022 (UTC)[reply]
Support evrifaessa ❯❯❯ talk 15:40, 11 February 2022 (UTC)[reply]
Support Nehaoua (talk) 16:23, 11 February 2022 (UTC)[reply]