@Théo Zimmermann It seems you can edit other peoples posts in order to get coqbot to do something. For example I pinged Maxime's post here and coqbot picked that up. I suppose if I were editing anybody elses post I could add a coqbot command there also. Seems problematic.
The obvious fix is to check the last editor of the post too not just the poster. Or at least reject commands from multiple authored posts.
coqbot should just not look at notifications from edits
I added support for edited comments after someone complained that edits were not taken into account. But I agree with the problem (with the caveat that you need already to be a somehow trusted member of the community to be able to edit someone else's comments) and I am fine with any solution (dropping support for edited comments or checking that the edit was done by the original author).
That being said, I realize something else which might also be problematic with taking edited comments into account which is that some commands may be triggered several times because of this (unless we do some smart checking that the command was added in the edit). Therefore, I'm leaning on the side of just reverting the feature.
I've pushed the revert. This means that a new version without this feature is being deployed. When this is done, the bench feature won't be available anymore until @Ali Caglayan rebases and redeploys his version of the bot.
Rebased and deploying: https://github.com/Alizter/bot/actions/runs/2041700266
Last updated: Dec 07 2023 at 06:38 UTC