(Not Andy, but a global interface admin in my volunteer capacity)
Hi,
The difference is that here the third party code is being run under the
context of Wikipedia. That means even with sandboxing mitigation such as
iframe (which has been broken before), it's much easier to break out and
collect
The other option would be to have a copy of the OWID software on our own
servers (it is all openly licensed). We tried this sort of with the OWID
mirror which you can see here on the wmcloud
https://owidm.wmcloud.org/
And functional within a mediawiki install here
Very well, I just deactivated the gadget from the Spanish Wikipedia and
removed the now broken template from the two articles that used it, until
some decision is made about it. I shared my views at
https://meta.wikimedia.org/wiki/Talk:OWID_Gadget#Three_ideas, in case
anyone's interested. Kind
