Re: [Wikimedia-l] Creation of separate user group for editing sitewide CSS/JS

On Tue, Jul 10, 2018 at 7:39 PM Alex Monk wrote: > On 10 July 2018 at 12:06, Bodhisattwa Mandal > wrote: > > > 1) Not all communities have been informed about this future change ( > > > https://meta.wikimedia.org/wiki/Distribution_list/Technical_Village_Pumps_ > > distribution_list > > ) > >

Re: [Wikimedia-l] Creation of separate user group for editing sitewide CSS/JS

Small wikis are, from this specific security issue, full of risks. I think this element should be taken into account. Restricting css/js editing may be a patch for a short time, but our infrastructure is pretty vulnerable, our users can be injected with malicious js by editing thousands of pages

Re: [Wikimedia-l] Creation of separate user group for editing sitewide CSS/JS

2018-07-10 20:38 GMT+03:00 Alex Monk : > On 10 July 2018 at 12:06, Bodhisattwa Mandal > wrote: > >> 1) Not all communities have been informed about this future change ( >> https://meta.wikimedia.org/wiki/Distribution_list/Technical_Village_Pumps_ >> distribution_list >> ) > > The plan appears to

Re: [Wikimedia-l] Creation of separate user group for editing sitewide CSS/JS

On 10 July 2018 at 12:06, Bodhisattwa Mandal wrote: > 1) Not all communities have been informed about this future change ( > https://meta.wikimedia.org/wiki/Distribution_list/Technical_Village_Pumps_ > distribution_list > ) The plan appears to be to do this, maybe it just hasn't happened yet:

[Wikimedia-l] Creation of separate user group for editing sitewide CSS/JS

Hi, I accidentally checked this meta page today, when another editor forwarded me the link in Facebook. Here it has been proposed that admins will be stripped off to edit js/css pages because of security