Re: [Wikitech-l] The right way to inject user-supplied JavaScript?

h-l [mailto:wikitech-l-boun...@lists.wikimedia.org] On Behalf Of Daniel Barrett Sent: Wednesday, December 30, 2015 11:03 AM To: Wikimedia developers Subject: Re: [Wikitech-l] The right way to inject user-supplied JavaScript? Kevin Israel writes: >Since MediaWiki 1.26, all ResourceLoader modules are

Re: [Wikitech-l] The right way to inject user-supplied JavaScript?

Kevin Israel writes: >Since MediaWiki 1.26, all ResourceLoader modules are loaded >asynchronously, so inline scripts now need to account for the >possibility they may be executed before the jquery and mediawiki modules >have loaded. > >If you use ResourceLoader::makeInlineScript() to build the

Re: [Wikitech-l] The right way to inject user-supplied JavaScript?

> On 29 dec. 2015, at 21:59, Daniel Barrett wrote: > I also read > https://www.mediawiki.org/wiki/ResourceLoader/Migration_guide_for_extension_developers > but did not find an answer. Hmm, we should really update parts of those guides btw. They not yet take 1.26 into

Re: [Wikitech-l] The right way to inject user-supplied JavaScript?

Hi, On 12/29/2015 12:59 PM, Daniel Barrett wrote: > tl;dr: What's the right way for a tag extension to execute JavaScript > provided by the user? (On a private wiki without Internet access.) > > Details: > I run a private wiki for developers (not accessible from the Internet) that > lets any

Re: [Wikitech-l] The right way to inject user-supplied JavaScript?

On 12/29/2015 03:59 PM, Daniel Barrett wrote: > I run a private wiki for developers (not accessible from the Internet) that > lets any wiki page author run JavaScript on a page by adding a tag: > > alert("hi"); > > (We understand the security implications, which is why the wiki isn't >

[Wikitech-l] The right way to inject user-supplied JavaScript?

tl;dr: What's the right way for a tag extension to execute JavaScript provided by the user? (On a private wiki without Internet access.) Details: I run a private wiki for developers (not accessible from the Internet) that lets any wiki page author run JavaScript on a page by adding a tag: