[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Nemo changed: What|Removed |Added Blocks||38516 -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Ruslan changed: What|Removed |Added CC||rusli...@gmail.com --- Comment #21 from Ruslan --- I fixed all above except bnwikibooks (can not find anything), eswikiquote and also http://upload.wikimedia.org/wikipedia/commons/e/ea/Button_easy_cite.png on euwiki (can not find either). It was a good news actually that so few of them turned up. In fact, a bigger problem is 404 errors. -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #20 from Chris Steipp --- Nemo was right. Ran a script to add all the gadgets to my user, and then reran my script to check Main_Page, action=edit for my user page, and Special:RecentChanges. These all popped up. aswiki * http://en.wikipedia.org/w/index.php?title=User:ProveIt_GT/ProveIt.js&action=raw&ctype=text/javascript bnwikibooks * http://en.wikipedia.org/w/index.php?title=User:ProveIt_GT/ProveIt.js&action=raw&ctype=text/javascript dewikiversity * http://toolserver.org/~w/ggu/?format=cssmarker&localuser=Benutzer&query=sysop@dewikiversity@P%7Cbureaucrat@dewikiversity@B * http://toolserver.org/~w/ggu/?format=cssmarker&localuser=Benutzer&query=sysop@dewikiversity@P%7Cbureaucrat@dewikiversity@B%7Csysop@commonswiki@C%7Csteward@metawiki@S dvwiktionary * http://commons.wikimedia.org/w/index.php?title=MediaWiki:Gadget-HotCat.js&action=raw&ctype=text/javascript elwiki * http://prototype.wikimedia.org/mwe-gadget/mwEmbed/remotes/mediaWiki.js?uselang=el elwikinews * http://meta.wikimedia.org/w/index.php?title=MediaWiki:Wikiminiatlas.js&action=raw&ctype=text/javascript&smaxage=21600&maxage=86400 * http://commons.wikimedia.org/w/index.php?title=MediaWiki:Gadget-HotCat.js&action=raw&ctype=text/javascript&smaxage=21600&maxage=86400 * http://en.wikipedia.org/w/index.php?title=MediaWiki:Gadget-popups.js&action=raw&ctype=text/javascript&smaxage=21600&maxage=86400 * http://meta.wikimedia.org/w/index.php?title=MediaWiki:Wikiminiatlas.js&action=raw&ctype=text/javascript&smaxage=21600&maxage=86400 * http://commons.wikimedia.org/w/index.php?title=MediaWiki:Gadget-HotCat.js&action=raw&ctype=text/javascript&smaxage=21600&maxage=86400 eswikiquote * http://commons.wikipedia.org/skins-1.5/monobook/headbg.jpg * http://es.wikipedia.org/skins-1.5/amethyst/chat.png * http://upload.wikimedia.org/wikipedia/commons/b/ba/Search_button_bckg.png * http://es.wikipedia.org/skins-1.5/amethyst/configure.png * http://es.wikipedia.org/skins-1.5/amethyst/connect.png * http://es.wikipedia.org/skins-1.5/amethyst/mainpage.png * http://es.wikipedia.org/skins-1.5/amethyst/portal.png * http://es.wikipedia.org/skins-1.5/amethyst/recentchanges.png * http://es.wikipedia.org/skins-1.5/amethyst/random.png * http://es.wikipedia.org/skins-1.5/amethyst/help.png * http://es.wikipedia.org/skins-1.5/amethyst/sitesupport.png * http://es.wikipedia.org/skins-1.5/amethyst/chat.png (and a few more amethyst urls) euwiki * http://prototype.wikimedia.org/mwe-gadget/mwEmbed/remotes/mediaWiki.js?uselang=eu * http://prototype.wikimedia.org/mwe-gadget/mwEmbed/remotes/mediaWiki.js?uselang=eu * http://upload.wikimedia.org/wikipedia/commons/e/ea/Button_easy_cite.png orwiktionary * http://commons.wikimedia.org/w/index.php?title=MediaWiki:Gadget-HotCat.js&action=raw&ctype=text/javascript ruwikinews * http://ru.wikipedia.org/w/index.php?action=raw&ctype=text/javascript&title=MediaWiki:Stemmer.js -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Nemo changed: What|Removed |Added CC||pathoschild+wmb...@gmail.co ||m --- Comment #19 from Nemo --- (In reply to comment #18) > Does Quentin have a script for that? I haven't had the time to get one > working > yet, so it would be great to get that. Yes, [[m:User:Pathoschild/Scripts/Synchbot#Global_settings_change]]. I think this applies: "Due to the potential for misuse, this bot is not open-source". https://github.com/Pathoschild/Wikimedia-contrib#readme Maybe Pathoschild can give you the source too. -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #18 from Chris Steipp --- Does Quentin have a script for that? I haven't had the time to get one working yet, so it would be great to get that. -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Nemo changed: What|Removed |Added CC||quentin...@gmail.com --- Comment #17 from Nemo --- Quentin, can you confirm your script can enable all gadgets on all wikis for a test account for Chris? -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #16 from Chris Steipp --- Next iteration will be to have it log in, and add every gadget available on every wiki... but I haven't figured that part out yet. -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #15 from Nemo --- (In reply to comment #11) > I (finally) got around to writing a phantomjs script that loads Main_Page on > all 878 wikis in all.dblist over https, and looks for any calls to http urls. Does the script work as unregistered user? The easy bulk of such problems (stuff loaded by default, "http" mentions in MediaWiki namespace) was already resolved, though of course people keep reintroducing more, but gadgets are more unpredictable. Quentinv57 has a JavaScript for global preferences change, maybe it can be adapted to enable all gadgets on all wikis for the test account. -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #14 from Sam Reed (reedy) --- (In reply to comment #11) > https://ve.wikimedia.org redirects to http://wikimedia.org.ve, no ssl on that > domain Redirect works fine for me in my browser... No HTTPS on the target, but it doesn't try to go to HTTPS -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #13 from Sam Reed (reedy) --- Woah, what it? cewiki done in https://ce.wikipedia.org/w/index.php?title=MediaWiki%3ACommon.css&diff=118765&oldid=93507 sawiki https://sa.wikipedia.org/w/index.php?title=%E0%A4%AE%E0%A4%BF%E0%A4%A1%E0%A5%80%E0%A4%AF%E0%A4%BE%E0%A4%B5%E0%A4%BF%E0%A4%95%E0%A5%80%3ACommon.js&diff=252205&oldid=240084 For dawiki pgcount.wikimedia.de is dead to the world. In which case should be removed... -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #12 from Chris Steipp --- And.. https://da.wikipedia.org loads http://pgcount.wikimedia.de/index.png?ns=0&title=Forside&factor=20&wiki=dawiki -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #11 from Chris Steipp --- I (finally) got around to writing a phantomjs script that loads Main_Page on all 878 wikis in all.dblist over https, and looks for any calls to http urls. Current result for this issue: https://ce.wikipedia.org loads http://upload.wikimedia.org/wikipedia/commons/1/10/Wikipedia-logo-v2-200px-transparent.png https://sa.wikipedia.org loads http://strategywiki.org/w/index.php?title=User:Najzere/edit_counter.js&action=raw&ctype=text/javascript https://ve.wikimedia.org redirects to http://wikimedia.org.ve, no ssl on that domain -- You are receiving this mail because: You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #10 from Marius Hoch --- Yes, I can give you an update... this is work in progress: Chris had it running on his personal laptop but it broke after a change. As doing this on a laptop isn't a to good idea for such a large automated task the plan is to migrate it to a labs instance after the scripts have been fixed. -- You are receiving this mail because: You are watching all bug changes. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #9 from Nemo --- (In reply to comment #7) > Chris Steipp is working on that following an idea of mine, together with the > 3rd party include problem. The idea behind that project is to scan the wikis > using a real-user browser scenario, so that we find all inclusions, no matter > how they're produced. Hoo, Chris, any update here, or way to help? -- You are receiving this mail because: You are watching all bug changes. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #8 from Nemo_bis 2012-08-24 18:12:29 UTC --- (In reply to comment #7) > Chris Steipp is working on that following an idea of mine, together with the > 3rd party include problem. The idea behind that project is to scan the wikis > using a real-user browser scenario, so that we find all inclusions, no matter > how they're produced. This also needs enabling (or otherwise including) all gadgets. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Hoo man changed: What|Removed |Added Status|NEW |ASSIGNED CC||cste...@wikimedia.org AssignedTo|cmcma...@wikimedia.org |cste...@wikimedia.org --- Comment #7 from Hoo man 2012-08-24 16:04:22 UTC --- It's true, that I already fixed several thousand of MediaWiki: pages including http only URIs, but there are some that can't be fixed that easily (eg. were the scripts are obfuscated or using nested imports [scripts which include even other scripts]). Chris Steipp is working on that following an idea of mine, together with the 3rd party include problem. The idea behind that project is to scan the wikis using a real-user browser scenario, so that we find all inclusions, no matter how they're produced. CCed and assigned to Chris... he'll post the result on meta wiki as soon as he got them. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Nemo_bis changed: What|Removed |Added CC||federicol...@tiscali.it, ||h...@online.de --- Comment #6 from Nemo_bis 2012-08-23 23:28:53 UTC --- Reference to the cleanup mentioned above: [[m:Stewards'_noticeboard/Archives/2012-04#Fixing_HTTPS_on_Wikimedia_wikis]]. (In reply to comment #5) > A quick check of the first few dozen results yields some suspicious links: > > http://toolserver.org > http://stats.wikimedia.org > http://s23.org/wikistats/wmspecials_html.php > http://www.wikilovesmonuments.be What do you mean suspicious? Hoo, in the link above, said that Commons had already taken care of the problem. Most URLs in the search results, from a cursory reading, seem simple external links which can't always be replaced (although interwikis can be used for many toolserver.org URLs and all stats.wikimedia.org resources). I'm not sure, however, if anyone went through all of them. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #5 from Chris McMahon 2012-02-27 18:57:26 UTC --- If I understand the correctly, checking on commons, given that commons seems to be the most complex wiki to have gotten 1.19 so far, I find on https://commons.wikimedia.org/w/index.php?title=Special%3ASearch&profile=advanced&search=http%3A%2F%2F&fulltext=Search&ns8=1&profile=advanced many hundreds of results for "http://"; A quick check of the first few dozen results yields some suspicious links: http://toolserver.org http://stats.wikimedia.org http://s23.org/wikistats/wmspecials_html.php http://www.wikilovesmonuments.be -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #4 from Sam Reed (reedy) 2012-02-24 15:09:14 UTC --- Reedy, hoo has switched about 3000 MediaWiki messages (with CSS, JS, whatever) to protocol-relative URLs and this should have fixed most of it on most wikis except evil JS which produce HTTP links with string manipulation -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #3 from Sam Reed (reedy) 2012-02-24 14:58:52 UTC --- Links don't matter so much, but inclusion of resources does more -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #2 from Mark A. Hershberger 2012-02-24 05:56:46 UTC --- Searching the MW namespace is a good place to start: https://he.wikinews.org/w/index.php?title=Special%3ASearch&profile=advanced&search=http%3A%2F%2F&fulltext=Search&ns8=1&profile=advanced which reveals https://he.wikinews.org/wiki/MediaWiki:Copyrightwarning -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 Mark A. Hershberger changed: What|Removed |Added Priority|Unprioritized |Normal CC||m...@everybody.org -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 34670] Check all wikis for inclusions of http resources on https
https://bugzilla.wikimedia.org/show_bug.cgi?id=34670 --- Comment #1 from Sam Reed (reedy) 2012-02-24 04:06:07 UTC --- Chris, just a further note on this - It's not something we need to do every upgrade, it's a "1 off" task post our proper HTTPS switchover in the latter half of last year. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
