A new MusicBrainz user script was released

Another script for the convenience of hardcore importers.

It will automatically click the button to confirm the form submission which occurs when submitting data to MusicBrainz from external sites (or Picard under certain circumstances)

A word of warning though:

These interstitial pages exist for security reasons against CSRF allowing you to inspect the data being submitted.

An alternative method to skip the confirmation page for importers is the skip_confirmation parameter (MBS-13225)


Concerning the “Auto login MusicBrainz ISRC importers” userscript already linked by @yomo12

This one will also potentially lower the security of your account.

Right now the script is basically only checking if the protocol and hostname of MagicISRC or ISRC Hunt are present in the URL.

A rogue website/application could gain access to parts of your data and edit rights by sticking either of them into to the redirect_uri parameter

Update

The ISRC importer login script should be more secure now. I’ve changed from using @include to @match directives so it only runs on the real MusicBrainz URLs (this change applies to the other scripts as well) and added more checks comparing the client_id plus redirect_uri and if the scopes are as expected.

3 Likes