Re: [Wikitech-l] 2016W43 ArchCom-RFC meeting: Allow HTML in SVG?

2016-10-25 Thread Gabriel Wicke
See also https://phabricator.wikimedia.org/T96461, which discusses using https://github.com/cure53/DOMPurify, and Parsoid's Token-based sanitizer. On Tue, Oct 25, 2016 at 6:12 PM, Legoktm wrote: > Hi, > > On 10/25/2016 03:14 PM, Rob Lanphier wrote: > > 3. Should we

Re: [Wikitech-l] Deploying the Linter extension to Wikimedia wikis

2016-10-25 Thread Legoktm
Hi, On 10/24/2016 06:42 AM, MZMcBride wrote: > How will the errors be queried? Will be there an api.php module to query > on a per-error or per-page basis? Yes, per-error is implemented, and I've also implemented per-namespace filtering, but not per-page yet. > Does the extension distinguish

Re: [Wikitech-l] 2016W43 ArchCom-RFC meeting: Allow HTML in SVG?

2016-10-25 Thread Legoktm
Hi, On 10/25/2016 03:14 PM, Rob Lanphier wrote: > 3. Should we turn our SVG validation code into a proper library? Yes! This is . :) -- Legoktm ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org

[Wikitech-l] 2016W43 ArchCom-RFC meeting: Allow HTML in SVG?

2016-10-25 Thread Rob Lanphier
Hi everyone, For [this week's ArchCom-RFC meeting][E325], let's talk about SVG. As you probably know, MediaWiki optionally allows for SVG uploads, which is allowed on many Wikimedia wikis (e.g. on Commons). However, in order to make this preference safe to use, we need to validate the SVG. One

[Wikitech-l] Small, old, unreviewed MediaWiki Core patches waiting in Gerrit

2016-10-25 Thread Andre Klapper
Another list of oldest MW Core patches, touching <=10 lines, with CR=0, Verified>0, without merge conflicts in Gerrit, sorted by age. Decisions (=CR) welcome.  Thanks in advance for your review + help reducing our review backlog. https://gerrit.wikimedia.org/r/#/c/258037/ Qualify page titles