I think in a normal flow of things, if I re-submit my suggested edit with further changes, all approve and reject votes would be forfeited or the edit would be put up for a fresh review from square 1. Am I right?
I just stumbled upon a scenario where:
- I submitted a suggested edit for review.
- I clicked the edit link again and made more changes.
- Meanwhile, some reviewers were approving my original suggested edit.
- I submitted my new suggested edit.
- I believe this coincided with the third approve vote my original suggested edit got.
Immediately, my new suggested edit was fully approved and visible as approved in the site. It was not re-submitted for a fresh review.
The revision where I saw this happen is here. My original edit didn't have the title change and the code blocks in the first paragraph. When I added them and submitted my change, it was found to be approved immediately. But in reality, the three reviewers who approved my original suggested edit did not see the new changes at all.
While my change is benign, this bug could make it possible to edit a post by suggesting a benign edit that would gather approvals, then carefully timing a malicious edit to be injected in just when the third approval vote is in.