[MediaWiki-commits] [Gerrit] labs/private[master]: passwords: update labs root key for Daniel

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/390240 ) Change subject: passwords: update labs root key for Daniel .. passwords: update labs root key for Daniel My labs root key is

[MediaWiki-commits] [Gerrit] operations/mediawiki-config[master]: Don't bother symlinking mobilelanding.php

2017-11-14 Thread Chad (Code Review)
Chad has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391349 ) Change subject: Don't bother symlinking mobilelanding.php .. Don't bother symlinking mobilelanding.php It's only used by a single docroot

[MediaWiki-commits] [Gerrit] operations/mediawiki-config[master]: Don't bother symlinking mobilelanding.php

2017-11-14 Thread Chad (Code Review)
Chad has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391349 ) Change subject: Don't bother symlinking mobilelanding.php .. Don't bother symlinking mobilelanding.php It's only used by a single

[MediaWiki-commits] [Gerrit] mediawiki...mobileapps[master]: Tweak: Don't report git tag is applied if signing or tagging...

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391133 ) Change subject: Tweak: Don't report git tag is applied if signing or tagging fails .. Tweak: Don't report git tag is applied

[MediaWiki-commits] [Gerrit] mediawiki...chromium-render[master]: Lower render queue timeout to 60 seconds

2017-11-14 Thread Pmiazga (Code Review)
Pmiazga has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391072 ) Change subject: Lower render queue timeout to 60 seconds .. Lower render queue timeout to 60 seconds Marco says "90s is too high

[MediaWiki-commits] [Gerrit] operations/puppet[production]: puppetmaster: Use ruby-mysql2 over ruby-mysql

2017-11-14 Thread Paladox (Code Review)
Paladox has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391336 ) Change subject: puppetmaster: Use ruby-mysql2 over ruby-mysql .. puppetmaster: Use ruby-mysql2 over ruby-mysql ruby-mysql is not in

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: Allow users to prevent new users from sending them email.

2017-11-14 Thread Dbarratt (Code Review)
Dbarratt has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391342 ) Change subject: Allow users to prevent new users from sending them email. .. Allow users to prevent new users from sending them email.

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: Special:Preferences: Use OOjs UI

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/352071 ) Change subject: Special:Preferences: Use OOjs UI .. Special:Preferences: Use OOjs UI * Change the form to OOUI mode. Tweak

[MediaWiki-commits] [Gerrit] operations/puppet[production]: planet: turn off day/time sections in rawdog style

2017-11-14 Thread Dzahn (Code Review)
Dzahn has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391323 ) Change subject: planet: turn off day/time sections in rawdog style .. planet: turn off day/time sections in rawdog style Change-Id:

[MediaWiki-commits] [Gerrit] apps...wikipedia[master]: Fix alignment of ConstraintLayouts for RTL.

2017-11-14 Thread Dbrant (Code Review)
Dbrant has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391332 ) Change subject: Fix alignment of ConstraintLayouts for RTL. .. Fix alignment of ConstraintLayouts for RTL. When using ConstraintLayout, one

[MediaWiki-commits] [Gerrit] mediawiki...ReadingLists[master]: Add missing testcase

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/390852 ) Change subject: Add missing testcase .. Add missing testcase With this, ReadingListRepository has 100% coverage apart from the

[MediaWiki-commits] [Gerrit] operations/puppet[production]: contint: migrate publisher to a profile

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/386813 ) Change subject: contint: migrate publisher to a profile .. contint: migrate publisher to a profile Drop the ::labs suffix while at

[MediaWiki-commits] [Gerrit] wikimedia...crm[master]: Add extended reports extension to add Address History tab op...

2017-11-14 Thread Eileen (Code Review)
Eileen has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391352 ) Change subject: Add extended reports extension to add Address History tab option. .. Add extended reports extension to add Address History

[MediaWiki-commits] [Gerrit] operations/puppet[production]: planet: add Wikimedia Community Logo to rawdog style

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391289 ) Change subject: planet: add Wikimedia Community Logo to rawdog style .. planet: add Wikimedia Community Logo to rawdog style Add

[MediaWiki-commits] [Gerrit] search...deploy[master]: Bump mjolnir submodule

2017-11-14 Thread EBernhardson (Code Review)
EBernhardson has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391294 ) Change subject: Bump mjolnir submodule .. Bump mjolnir submodule This brings in the patch that made working_dir configurable. We need

[MediaWiki-commits] [Gerrit] mediawiki...release[master]: We need a vendor repo for older versions with no submodules

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391295 ) Change subject: We need a vendor repo for older versions with no submodules .. We need a vendor repo for older versions with no submodules

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: [WIP] Use Remex in Sanitizer::stripAllTags()

2017-11-14 Thread Catrope (Code Review)
Catrope has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391348 ) Change subject: [WIP] Use Remex in Sanitizer::stripAllTags() .. [WIP] Use Remex in Sanitizer::stripAllTags() Using a real HTML tokenizer

[MediaWiki-commits] [Gerrit] mediawiki...TimedMediaHandler[master]: Final adjust to Ogg Theora transcode settings

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391346 ) Change subject: Final adjust to Ogg Theora transcode settings .. Final adjust to Ogg Theora transcode settings Apply some

[MediaWiki-commits] [Gerrit] mediawiki...PageTriage[master]: PageTriageTags.sql: clean up trailing whitespace

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391150 ) Change subject: PageTriageTags.sql: clean up trailing whitespace .. PageTriageTags.sql: clean up trailing whitespace

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: DatabaseUpdater: Add modifyExtensionTable()

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391152 ) Change subject: DatabaseUpdater: Add modifyExtensionTable() .. DatabaseUpdater: Add modifyExtensionTable() We already had

[MediaWiki-commits] [Gerrit] operations/puppet[production]: contint: Remove ruby2.1 as it is in base package

2017-11-14 Thread Paladox (Code Review)
Paladox has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391351 ) Change subject: contint: Remove ruby2.1 as it is in base package .. contint: Remove ruby2.1 as it is in base package Because base will

[MediaWiki-commits] [Gerrit] search...deploy[master]: Deploy pip and wheel packages for jessie

2017-11-14 Thread EBernhardson (Code Review)
EBernhardson has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391286 ) Change subject: Deploy pip and wheel packages for jessie .. Deploy pip and wheel packages for jessie Debian jessie based hosts

[MediaWiki-commits] [Gerrit] operations/puppet[production]: Revert "Remove borked cp4024 from ipsec nodelists"

2017-11-14 Thread BBlack (Code Review)
BBlack has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391287 ) Change subject: Revert "Remove borked cp4024 from ipsec nodelists" .. Revert "Remove borked cp4024 from ipsec nodelists" This reverts

[MediaWiki-commits] [Gerrit] operations/puppet[production]: Revert "Remove borked cp4024 from ipsec nodelists"

2017-11-14 Thread BBlack (Code Review)
BBlack has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391287 ) Change subject: Revert "Remove borked cp4024 from ipsec nodelists" .. Revert "Remove borked cp4024 from ipsec nodelists" This

[MediaWiki-commits] [Gerrit] operations/puppet[production]: planet: add Wikimedia Community Logo to rawdog style

2017-11-14 Thread Dzahn (Code Review)
Dzahn has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391289 ) Change subject: planet: add Wikimedia Community Logo to rawdog style .. planet: add Wikimedia Community Logo to rawdog style Add Wikimedia

[MediaWiki-commits] [Gerrit] search...deploy[master]: Bump mjolnir submodule

2017-11-14 Thread EBernhardson (Code Review)
EBernhardson has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391294 ) Change subject: Bump mjolnir submodule .. Bump mjolnir submodule This brings in the patch that made working_dir configurable.

[MediaWiki-commits] [Gerrit] mediawiki...mobileapps[master]: Fix swagger-ui spec parsing

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391075 ) Change subject: Fix swagger-ui spec parsing .. Fix swagger-ui spec parsing This was failing due to the types of items in

[MediaWiki-commits] [Gerrit] mediawiki...TemplateStyles[master]: Type annotations for some tests

2017-11-14 Thread MaxSem (Code Review)
MaxSem has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391344 ) Change subject: Type annotations for some tests .. Type annotations for some tests Change-Id: Ibe1750e6cfed593304e027d4eda7609a73980e62 ---

[MediaWiki-commits] [Gerrit] mediawiki...TemplateStyles[master]: Don't skip tests if the hook is not present

2017-11-14 Thread MaxSem (Code Review)
MaxSem has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391345 ) Change subject: Don't skip tests if the hook is not present .. Don't skip tests if the hook is not present This just hides the error if

[MediaWiki-commits] [Gerrit] mediawiki...TemplateStyles[master]: Fix tests

2017-11-14 Thread MaxSem (Code Review)
MaxSem has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391343 ) Change subject: Fix tests .. Fix tests Change-Id: I07d9271511e279cd0e12910673848654e6ff5eef --- M tests/phpunit/TemplateStylesHooksTest.php

[MediaWiki-commits] [Gerrit] operations/puppet[production]: webperf: Record navtiming discards to Graphite, and add is_s...

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/390061 ) Change subject: webperf: Record navtiming discards to Graphite, and add is_sane test .. webperf: Record navtiming discards to

[MediaWiki-commits] [Gerrit] operations/puppet[production]: webperf: Refactor tests to directly associate expected data ...

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/390083 ) Change subject: webperf: Refactor tests to directly associate expected data with cases .. webperf: Refactor tests to directly

[MediaWiki-commits] [Gerrit] mediawiki...PageForms[master]: Changed addModuleStyles() + ...Scripts() to just addModules()

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391282 ) Change subject: Changed addModuleStyles() + ...Scripts() to just addModules() .. Changed addModuleStyles() + ...Scripts() to

[MediaWiki-commits] [Gerrit] apps...wikipedia[master]: Fix: Incorrect language counts

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391132 ) Change subject: Fix: Incorrect language counts .. Fix: Incorrect language counts - Update the language counts when the

[MediaWiki-commits] [Gerrit] mediawiki...release[master]: make-release: Remove old pre-semver support

2017-11-14 Thread Chad (Code Review)
Chad has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391290 ) Change subject: make-release: Remove old pre-semver support .. make-release: Remove old pre-semver support Change-Id:

[MediaWiki-commits] [Gerrit] search...deploy[master]: Dont recreate virtualenv unless necessary

2017-11-14 Thread EBernhardson (Code Review)
EBernhardson has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391296 ) Change subject: Dont recreate virtualenv unless necessary .. Dont recreate virtualenv unless necessary It appears that while the

[MediaWiki-commits] [Gerrit] search...deploy[master]: Dont recreate virtualenv unless necessary

2017-11-14 Thread EBernhardson (Code Review)
EBernhardson has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391296 ) Change subject: Dont recreate virtualenv unless necessary .. Dont recreate virtualenv unless necessary It appears that while

[MediaWiki-commits] [Gerrit] mediawiki...MinervaNeue[master]: Unify SVG markup

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/389290 ) Change subject: Unify SVG markup .. Unify SVG markup Align SVG markup across Foundation products by: - unifying XML

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SanitizerTest: Add tests for stripAllTags

2017-11-14 Thread Catrope (Code Review)
Catrope has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391347 ) Change subject: SanitizerTest: Add tests for stripAllTags .. SanitizerTest: Add tests for stripAllTags Bug: T179978 Change-Id:

[MediaWiki-commits] [Gerrit] wikimedia...wetzel[develop]: Fix prevalence bugs

2017-11-14 Thread Bearloga (Code Review)
Bearloga has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391288 ) Change subject: Fix prevalence bugs .. Fix prevalence bugs (Hopefully) fixes: - the shadow and the text are a bit off - the list of

[MediaWiki-commits] [Gerrit] mediawiki...DonationInterface[master]: More debugging for orphan rectifier

2017-11-14 Thread Mepps (Code Review)
Mepps has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391291 ) Change subject: More debugging for orphan rectifier .. More debugging for orphan rectifier Change-Id:

[MediaWiki-commits] [Gerrit] operations/puppet[production]: snapshot: Use --no-cache for dumping Wikidata entities

2017-11-14 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391053 ) Change subject: snapshot: Use --no-cache for dumping Wikidata entities .. snapshot: Use --no-cache for dumping Wikidata entities

[MediaWiki-commits] [Gerrit] mediawiki...TimedMediaHandler[master]: Final adjust to Ogg Theora transcode settings

2017-11-14 Thread Brion VIBBER (Code Review)
Brion VIBBER has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391346 ) Change subject: Final adjust to Ogg Theora transcode settings .. Final adjust to Ogg Theora transcode settings Apply some final

[MediaWiki-commits] [Gerrit] apps...wikipedia[master]: Fix alignment of ConstraintLayouts for RTL.

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391332 ) Change subject: Fix alignment of ConstraintLayouts for RTL. .. Fix alignment of ConstraintLayouts for RTL. When using

[MediaWiki-commits] [Gerrit] operations/mediawiki-config[master]: extract2.php: Stop allowing the www portal templates

2017-11-14 Thread Chad (Code Review)
Chad has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391353 ) Change subject: extract2.php: Stop allowing the www portal templates .. extract2.php: Stop allowing the www portal templates None of them

[MediaWiki-commits] [Gerrit] mediawiki...vendor[master]: Add .htaccess to disallow web access

2017-11-14 Thread Ejegg (Code Review)
Ejegg has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391361 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access No need to expose vendor/ to web Bug: T180237

[MediaWiki-commits] [Gerrit] mediawiki...DonationInterface[deployment]: Update vendor submodule for .htaccess

2017-11-14 Thread Ejegg (Code Review)
Ejegg has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391362 ) Change subject: Update vendor submodule for .htaccess .. Update vendor submodule for .htaccess Change-Id:

[MediaWiki-commits] [Gerrit] wikimedia...vendor[master]: Deny web access to /vendor

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391367 ) Change subject: Deny web access to /vendor .. Deny web access to /vendor Change-Id: I160a581ff2d7ba7ff2b6d3ef2b4c710803f42700

[MediaWiki-commits] [Gerrit] mediawiki/vendor[REL1_29]: Add .htaccess to disallow web access

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391371 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access The /vendor directory does not need to

[MediaWiki-commits] [Gerrit] mediawiki/vendor[REL1_29]: Add .htaccess to disallow web access

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391371 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access The /vendor directory does not need to be web

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: update.php: Remove eval-stdin.php if necessary

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391381 ) Change subject: SECURITY: update.php: Remove eval-stdin.php if necessary .. SECURITY: update.php: Remove eval-stdin.php if necessary If

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Create a .htaccess in /vendor after composer runs

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391380 ) Change subject: SECURITY: Create a .htaccess in /vendor after composer runs .. SECURITY: Create a .htaccess in /vendor after composer

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: update.php: Remove eval-stdin.php if necessary

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391381 ) Change subject: SECURITY: update.php: Remove eval-stdin.php if necessary .. SECURITY: update.php: Remove eval-stdin.php if necessary

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Handle -{}- syntax in attributes safely

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391383 ) Change subject: SECURITY: Handle -{}- syntax in attributes safely .. SECURITY: Handle -{}- syntax in attributes safely Previously,

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Ensure Message::rawParams can't lead to XSS

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391378 ) Change subject: SECURITY: Ensure Message::rawParams can't lead to XSS .. SECURITY: Ensure Message::rawParams can't lead to XSS If

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Handle -{}- syntax in attributes safely

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391383 ) Change subject: SECURITY: Handle -{}- syntax in attributes safely .. SECURITY: Handle -{}- syntax in attributes safely Previously, if one

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: Bump 1.27.4

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391384 ) Change subject: Bump 1.27.4 .. Bump 1.27.4 Change-Id: Idf9a1146054dab3a2b3126cf84efcc6787b39357 --- M RELEASE-NOTES-1.27 M

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Make anchor for headlines escape > and

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391379 ) Change subject: SECURITY: Make anchor for headlines escape > and < .. SECURITY: Make anchor for headlines escape > and < As a

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Escape internal error message

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391374 ) Change subject: SECURITY: Escape internal error message .. SECURITY: Escape internal error message This message contains the request

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Do not reveal if user exists during login failure

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391377 ) Change subject: SECURITY: Do not reveal if user exists during login failure .. SECURITY: Do not reveal if user exists during login

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Ensure Message::rawParams can't lead to XSS

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391378 ) Change subject: SECURITY: Ensure Message::rawParams can't lead to XSS .. SECURITY: Ensure Message::rawParams can't lead to XSS If you used

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: API: Avoid some silliness with browser-guessed fil...

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391376 ) Change subject: SECURITY: API: Avoid some silliness with browser-guessed filenames .. SECURITY: API: Avoid some silliness with

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Add throttling for BotPasswords authentication att...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391375 ) Change subject: SECURITY: Add throttling for BotPasswords authentication attempts .. SECURITY: Add throttling for BotPasswords

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: API: Avoid some silliness with browser-guessed fil...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391376 ) Change subject: SECURITY: API: Avoid some silliness with browser-guessed filenames .. SECURITY: API: Avoid some silliness with

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Escape internal error message

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391374 ) Change subject: SECURITY: Escape internal error message .. SECURITY: Escape internal error message This message contains the request url,

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Add throttling for BotPasswords authentication att...

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391375 ) Change subject: SECURITY: Add throttling for BotPasswords authentication attempts .. SECURITY: Add throttling for BotPasswords

[MediaWiki-commits] [Gerrit] mediawiki...vendor[master]: Add .htaccess to disallow web access

2017-11-14 Thread Ejegg (Code Review)
Ejegg has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391361 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access No need to expose vendor/ to web Bug:

[MediaWiki-commits] [Gerrit] wikimedia...crm[deployment]: Update submodules to deny /vendor web access

2017-11-14 Thread Ejegg (Code Review)
Ejegg has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391385 ) Change subject: Update submodules to deny /vendor web access .. Update submodules to deny /vendor web access Change-Id:

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: XSS in langconverter when regex hits pcre.backtrac...

2017-11-14 Thread Reedy (Code Review)
Reedy has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391382 ) Change subject: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit .. SECURITY: XSS in langconverter when regex

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: Bump 1.27.4

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391384 ) Change subject: Bump 1.27.4 .. Bump 1.27.4 Change-Id: Idf9a1146054dab3a2b3126cf84efcc6787b39357 --- M RELEASE-NOTES-1.27 M

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: XSS in langconverter when regex hits pcre.backtrac...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391382 ) Change subject: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit .. SECURITY: XSS in langconverter when regex hits

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Do not reveal if user exists during login failure

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391377 ) Change subject: SECURITY: Do not reveal if user exists during login failure .. SECURITY: Do not reveal if user exists during login failure

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Create a .htaccess in /vendor after composer runs

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391380 ) Change subject: SECURITY: Create a .htaccess in /vendor after composer runs .. SECURITY: Create a .htaccess in /vendor after composer runs

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: SECURITY: Make anchor for headlines escape > and

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391379 ) Change subject: SECURITY: Make anchor for headlines escape > and < .. SECURITY: Make anchor for headlines escape > and < As a hardening step

[MediaWiki-commits] [Gerrit] mediawiki/core[fundraising/REL1_27]: XSS in langconverter when regex hits pcre.backtrack_limit

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391409 ) Change subject: XSS in langconverter when regex hits pcre.backtrack_limit .. XSS in langconverter when regex hits

[MediaWiki-commits] [Gerrit] mediawiki/core[fundraising/REL1_27]: SECURITY: API: Avoid some silliness with browser-guessed fil...

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391411 ) Change subject: SECURITY: API: Avoid some silliness with browser-guessed filenames .. SECURITY: API: Avoid some silliness with

[MediaWiki-commits] [Gerrit] mediawiki/core[fundraising/REL1_27]: Make anchor for headlines escape > and

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391410 ) Change subject: Make anchor for headlines escape > and < .. Make anchor for headlines escape > and < As a hardening step

[MediaWiki-commits] [Gerrit] mediawiki/core[fundraising/REL1_27]: SECURITY: Do not reveal if user exists during login failure

2017-11-14 Thread Ejegg (Code Review)
Ejegg has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391412 ) Change subject: SECURITY: Do not reveal if user exists during login failure .. SECURITY: Do not reveal if user exists during login

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Fix rebase error in 4d38a489

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391456 ) Change subject: SECURITY: Fix rebase error in 4d38a489 .. SECURITY: Fix rebase error in 4d38a489 The fix for T125177 from F4932228 was

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Handle -{}- syntax in attributes safely

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391455 ) Change subject: SECURITY: Handle -{}- syntax in attributes safely .. SECURITY: Handle -{}- syntax in attributes safely Previously, if one

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: update.php: Remove eval-stdin.php if necessary

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391453 ) Change subject: SECURITY: update.php: Remove eval-stdin.php if necessary .. SECURITY: update.php: Remove eval-stdin.php if necessary If

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Create a .htaccess in /vendor after composer runs

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391452 ) Change subject: SECURITY: Create a .htaccess in /vendor after composer runs .. SECURITY: Create a .htaccess in /vendor after composer runs

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: API: Avoid some silliness with browser-guessed fil...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391449 ) Change subject: SECURITY: API: Avoid some silliness with browser-guessed filenames .. SECURITY: API: Avoid some silliness with

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: XSS in langconverter when regex hits pcre.backtrac...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391454 ) Change subject: SECURITY: XSS in langconverter when regex hits pcre.backtrack_limit .. SECURITY: XSS in langconverter when regex hits

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Do not reveal if user exists during login failure

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391450 ) Change subject: SECURITY: Do not reveal if user exists during login failure .. SECURITY: Do not reveal if user exists during login failure

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Escape internal error message

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391447 ) Change subject: SECURITY: Escape internal error message .. SECURITY: Escape internal error message This message contains the request url,

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Ensure Message::rawParams can't lead to XSS

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391451 ) Change subject: SECURITY: Ensure Message::rawParams can't lead to XSS .. SECURITY: Ensure Message::rawParams can't lead to XSS If you used

[MediaWiki-commits] [Gerrit] mediawiki/core[master]: SECURITY: Add throttling for BotPasswords authentication att...

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391448 ) Change subject: SECURITY: Add throttling for BotPasswords authentication attempts .. SECURITY: Add throttling for BotPasswords

[MediaWiki-commits] [Gerrit] wikimedia...SmashPig[master]: Update phpunit in composer.lock

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391457 ) Change subject: Update phpunit in composer.lock .. Update phpunit in composer.lock Change-Id:

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_27]: Add missing ComposerVendorHtaccessCreator class to autoload.php

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391463 ) Change subject: Add missing ComposerVendorHtaccessCreator class to autoload.php .. Add missing ComposerVendorHtaccessCreator class to

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_29]: Add missing ComposerVendorHtaccessCreator class to autoload.php

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391464 ) Change subject: Add missing ComposerVendorHtaccessCreator class to autoload.php .. Add missing ComposerVendorHtaccessCreator class to

[MediaWiki-commits] [Gerrit] mediawiki/core[REL1_30]: Add missing ComposerVendorHtaccessCreator class to autoload.php

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391465 ) Change subject: Add missing ComposerVendorHtaccessCreator class to autoload.php .. Add missing ComposerVendorHtaccessCreator class to

[MediaWiki-commits] [Gerrit] marvin[master]: WIP: use Webpack for server production builds

2017-11-14 Thread Niedzielski (Code Review)
Niedzielski has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391467 ) Change subject: WIP: use Webpack for server production builds .. WIP: use Webpack for server production builds Bug: T177235 Change-Id:

[MediaWiki-commits] [Gerrit] operations/mediawiki-config[master]: search.wikimedia.org: Add robots.txt, tell them to stay away

2017-11-14 Thread jenkins-bot (Code Review)
jenkins-bot has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391470 ) Change subject: search.wikimedia.org: Add robots.txt, tell them to stay away .. search.wikimedia.org: Add robots.txt, tell them

[MediaWiki-commits] [Gerrit] mediawiki...mobileapps[master]: Media: stop filtering by size + mime type

2017-11-14 Thread Mholloway (Code Review)
Mholloway has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391358 ) Change subject: Media: stop filtering by size + mime type .. Media: stop filtering by size + mime type We'll be going in the direction

[MediaWiki-commits] [Gerrit] mediawiki...mobileapps[master]: WIP: Get media items directly from Parsoid HTML

2017-11-14 Thread Mholloway (Code Review)
Mholloway has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391359 ) Change subject: WIP: Get media items directly from Parsoid HTML .. WIP: Get media items directly from Parsoid HTML Saves a MediaWiki API

[MediaWiki-commits] [Gerrit] mediawiki...FundraisingEmailUnsubscribe[master]: Disallow web access to /vendor

2017-11-14 Thread Ejegg (Code Review)
Ejegg has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391373 ) Change subject: Disallow web access to /vendor .. Disallow web access to /vendor Bug: T180237 Change-Id:

[MediaWiki-commits] [Gerrit] wikimedia...vendor[master]: Deny web access to /vendor

2017-11-14 Thread Ejegg (Code Review)
Ejegg has submitted this change and it was merged. ( https://gerrit.wikimedia.org/r/391364 ) Change subject: Deny web access to /vendor .. Deny web access to /vendor Change-Id: I8300b6165d1690e3598b9423dc2eb2d700833197 --- A

[MediaWiki-commits] [Gerrit] mediawiki/vendor[REL1_30]: Add .htaccess to disallow web access

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391427 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access The /vendor directory does not need to be web

[MediaWiki-commits] [Gerrit] mediawiki/vendor[master]: Add .htaccess to disallow web access

2017-11-14 Thread Reedy (Code Review)
Reedy has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/391428 ) Change subject: Add .htaccess to disallow web access .. Add .htaccess to disallow web access The /vendor directory does not need to be web

  1   2   3   4   5   6   >