[Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Thomas Gries
I suggest renaming of pages

1. Cross-site scripting = Cross-site scripting (XSS, XSSI)
https://www.mediawiki.org/wiki/Cross-site_scripting

2. Cross-site request forgery = Cross-site request forgery (CSRF)
https://www.mediawiki.org/wiki/Cross-site_request_forgery


Before doing that I want to be sure that you accept it. To you support
my initiative.

Another page, part of the MW Security Guide, has already (only) XSS in
its name

DOM-based_XSS
https://www.mediawiki.org/wiki/DOM-based_XSS

See https://www.mediawiki.org/wiki/MSG .


Rationale:

The change would have the advantages, that the section and pages in the
MediaWiki Security Guide (MSG) have the same, more detailed page title.
And that the commonly used abbrevations are then forming part of this title.


I am asking, because these pages are so important and I don't want to be
rude simply changing it.
Can you confirm you allow me that change?

T.



signature.asc
Description: OpenPGP digital signature
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread K. Peachey
What actual benefit with having their abbreviation in the title archive?

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Thomas Gries
Am 22.03.2013 07:29, schrieb K. Peachey:
 What actual benefit with having their abbreviation in the title archive?
Make users aware at the first glance to the TOC, that XSS is this and
CSRF is that if they did not yet know this.
You, as expert, can overread the part in parentheses.

I am the editor of that book, and I like it in.

BTW, what is the purpose in having a title DOM-based XSS (like it is now)
instead of the more distinct and absolutely clear title
DOM-based Cross-Site Scripting (CSS)



___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Daniel Friesen

On Thu, 21 Mar 2013 23:35:27 -0700, Thomas Gries m...@tgries.de wrote:


Am 22.03.2013 07:29, schrieb K. Peachey:

What actual benefit with having their abbreviation in the title archive?

Make users aware at the first glance to the TOC, that XSS is this and
CSRF is that if they did not yet know this.
You, as expert, can overread the part in parentheses.

I am the editor of that book, and I like it in.

BTW, what is the purpose in having a title DOM-based XSS (like it is  
now)

instead of the more distinct and absolutely clear title
DOM-based Cross-Site Scripting (CSS)


Including the abbreviation into the title seems quite a non-standard thing  
to do. Parenthesis are typically used for disambig, not adding extra  
versions of the title.


((Side note, XSS not CSS))

--
~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://danielfriesen.name/]


___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Thomas Gries
Am 22.03.2013 08:26, schrieb Daniel Friesen:
 You, as expert, can overread the part in parentheses.

 Including the abbreviation into the title seems quite a non-standard
 thing to do. Parenthesis are typically used for disambig, not adding
 extra versions of the title.



I fixed it locally on the MSG page;

[[pagename|Pagename (something)]]

The E:Collection page renderer obeys my page names and - as wanted -
uses Pagename (something) as header  on pages.
So I could locally fix my problem, and no rename is needed.

problem solved with a differnt solution; thread closed.

T.



___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Daniel Friesen
On 13-03-22 12:41 AM, Thomas Gries wrote:
 Am 22.03.2013 08:26, schrieb Daniel Friesen:
 You, as expert, can overread the part in parentheses.
 Including the abbreviation into the title seems quite a non-standard
 thing to do. Parenthesis are typically used for disambig, not adding
 extra versions of the title.


 I fixed it locally on the MSG page;

 [[pagename|Pagename (something)]]

 The E:Collection page renderer obeys my page names and - as wanted -
 uses Pagename (something) as header  on pages.
 So I could locally fix my problem, and no rename is needed.

 problem solved with a differnt solution; thread closed.

 T.
Editorially, I'd suggest [[ Cross-site request forgery]] (XSS).

~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://danielfriesen.name/]

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] RFC: I suggest renaming of pages Cross-site scripting = Cross-site scripting (XSS, XSSI) and Cross-site request forgery = Cross-site request forgery (CSRF)

2013-03-22 Thread Chris Steipp
On Thu, Mar 21, 2013 at 11:35 PM, Thomas Gries m...@tgries.de wrote:
 Am 22.03.2013 07:29, schrieb K. Peachey:
 What actual benefit with having their abbreviation in the title archive?
 Make users aware at the first glance to the TOC, that XSS is this and
 CSRF is that if they did not yet know this.
 You, as expert, can overread the part in parentheses.

 I am the editor of that book, and I like it in.

 BTW, what is the purpose in having a title DOM-based XSS (like it is now)
 instead of the more distinct and absolutely clear title
 DOM-based Cross-Site Scripting (CSS)

Cross-Site Scripting (DOM-based) might be a better name for that
page? I didn't put much thought into it before naming it originally.

It would be good to make the names consistent, thanks for working on
this Thomas.

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l