[Wikitech-l] Re: inquiry on method to compress PNG imagefiles stored by WikiMedia

Generally disk space is cheap enough that doing these sorts of things aren't worth the extra complexity, especially when we just have to convert it back to png in order to serve it to the user at the end of the day. LZMA is a more advanced compression algorithm than DEFLATE (which is what png

[Wikitech-l] Re: ORES To Lift Wing Migration

> Our understanding is that renaming extensions in MediaWiki is a long and complicated process, so we'll likely not be able to rename it in the foreseeable future. Why? Renaming is usually a bad thing because it often confuses the hell out of users, but from a technical perspective it is pretty

[Wikitech-l] Re: [action requested] Technical Decision-Making Retrospective Survey

Just fyi, qustion 17 requires you to answer even though the instructions say not to answer unless applicable. On Tuesday, July 18, 2023, Moriel Schottlender wrote: > Hello all, > > The Technical Decision-Making Forum Retrospective team >

[Wikitech-l] Re: Gerrit replica downtime (30 minutes) tomorrow Tue, 16 May 13:00-15:00 UTC

Does this include other uses of gerrit replica? Should extension distributor be switched to main gerrit? -- Brian On Tuesday, May 16, 2023, Daniel Zahn wrote: > > This means codesearch will be affected (and won't get updated) and > possibly even will be down during that time. > > We, at least

[Wikitech-l] Re: Continuing development of mediawiki Extension AutoCreatePage

Hi, Did you try making pull requests against https://github.com/Universal-Omega/AutoCreatePage ? I think universal omega took over the extension at some point. Generally speaking, if the original author doesn't respond after a reasonable time, the original extension does not work with modern

[Wikitech-l] Re: Technical Decision Making Retro

Hi, > The retro itself is not a governance process, and it won't involve making decisions of consequence. This seems kind of at odds what is written on wiki. To quote the opening paragraph of

[Wikitech-l] Reflecting on my listening tour

Perhaps i am hyperfocused on technical debt in the sense of improving the abstractions used in mediawiki. The phrasing around sustainability especially leads me in that direction. However, technical debt is certainly a broad concept and can mean a lot of things. The common thread in the examples

[Wikitech-l] Re: About "Final view structure for view `page_view`"

As far as i know mediawiki core has never used views. It is possible some extension made it, but it would be an unusual thing to do (for example the UserSnoop extension makes a view, but not named that). Or maybe a sysadmin made it for their own purposes at some point. -- Brian On Friday, March

[Wikitech-l] Re: Use case for sha1 in revisions

This kind of sounds like a non-answer, but its mostly useful if you want a hash of the revision. I dont think mw core really uses it, but it can be useful for quickly detecting duplicate revisions. I think primarily it is for external users. -- Brian On Wednesday, March 22, 2023, Bináris wrote:

[Wikitech-l] Re: March 2023 Datacenter Switchover

You should probably just file a bug. Its certainly plausible it had something to do with data center switch, but it could just as equally be unrelated. It requires someone to investigate what part of the system failed (job queue? Varnish? Swift?) which would then lead to a root cause. Its pretty

[Wikitech-l] Re: [Proposal] Disable setting the "Lowest" Priority value in Phabricator

On Friday, February 24, 2023, Dan Garry (Deskana) wrote: > On Fri, 24 Feb 2023 at 11:20, Andre Klapper > wrote: > >> * Personally I also assume Lowest priority is sometimes used instead >>of honestly declining a task (means: "this is not a good idea"[5]). >>But of course that is rather

[Wikitech-l] Re: Can't claim on Phabricator

I also have a memory of there previously being a 1 click button in the sidebar to claim task. Maybe it was a feature that got removed or perhaps just a false memory. -- Bawolff On Monday, February 13, 2023, Andre Klapper wrote: > On Thu, 2023-02-02 at 17:43 +0100, Bináris wrote: > > > > Jaime

[Wikitech-l] Re: Contributing through block bases programming to the Wikimedia Codebase

I don't think this is suitable for the mediawiki codebase, but it sounds like something wikifunctions would be interested in. See https://meta.wikimedia.org/wiki/Abstract_Wikipedia -- Bawolff On Wednesday, February 8, 2023, wrote: > Hello, > > I am interested in programming and I asked a

[Wikitech-l] Re: Announcing: Path review board

On Thursday, February 2, 2023, Brett Cornwall wrote: > On 2023-02-02 11:33, Zoran Dori wrote: > >> Amazing to hear about this, I'm hoping that this will improve the number >> of >> merged patches which are stuck on waiting for review. >> > > It also might be important to keep contributors

[Wikitech-l] Announcing: Path review board

Yesterday there was a conversation about code review on irc and among other things, how sometimes patches can get "stuck". I had an idea for a way to improve things. I'm not sure if it is a good idea, but there's only one way to find out. So without further ado, announcing the Code Review Patch

[Wikitech-l] Re: Avoid invisible characters in page titles

Even in english, you still have emoiji that use ZWJ characters. e.g. ️‍ has "invisible" characters. There are all sorts of control characters in unicode that usually do nothing but sometimes do something. There may be some invisible characters that make sense to strip or normalize. Indeed we

[Wikitech-l] Re: Paid collaboration for a custom MediaWiki Skin

Hi, This list isn't for job postings. There is a list of people who do that sort of thing at https://www.mediawiki.org/wiki/Professional_development_and_consulting -- Brian On Monday, November 21, 2022, Busayo wrote: > Hello, > > > > We want to create a custom skin for our game's MediaWiki

[Wikitech-l] Re: Cookie-based CSS toggles for logged-out readers?

s with accounts > would be good on a lot of levels > >  > > On Fri., Sep. 30, 2022, 4:59 p.m. Brian Wolff, wrote: > >> Basically, if you are ok with it only taking affect after page load (so >> users see first the original page then the new version) it is trivia

[Wikitech-l] Re: TDF is looking for community representatives

So i think you would want a compromise approach with the email. Having the email be 20 pages long would be bad, but its still possible to have more of a "hook" without turning it into a massive wall of text. That said, i think the lack of details in the email is not the main problem here. To

[Wikitech-l] Re: TDF is looking for community representatives

; users" proposal out to the representatives for their feedback. You can see > it on the TDF <https://phabricator.wikimedia.org/project/board/5179/> > board. > > Thank you, > TDF > > > On Wed, Oct 5, 2022, 5:46 PM Brian Wolff wrote: > >> Out of curiosit

[Wikitech-l] Re: Cookie-based CSS toggles for logged-out readers?

Basically, if you are ok with it only taking affect after page load (so users see first the original page then the new version) it is trivial. However flash of wrongly styled content is a really bad user experience. To do it without the flash of wrong version of toggle, is difficult due to the

[Wikitech-l] Reminder about WMF board elections - People who develop mediawiki extensions are eligible to vote

I haven't seen too much discussion about this, but i just wanted to remind everyone that people who participate in mediawiki development (including many third party extensions) are eligible to vote in the current Wikimedia foundation board of trustees election, even if you don't edit any wikimedia

[Wikitech-l] Re: Invitation to join the Movement Strategy Forum

So it seems like the killer feature here is integrated machine translation. As a naive monolingual english feature this surprised me - i always assumed separate external translation would be basically equivalent, but i guess that's wrong. Anyways, assuming this is accurate, we should bring

[Wikitech-l] Re: Don't forgot, only 4 more days to become eligible to vote in Board elections

Out of curiosity, who decides what constitutes "hav[ing] substantially engaged in the design and/or review processes of technical development related to Wikimedia"? -- Brian of technical development related to Wikimedia On Friday, July 1, 2022, K. Peachey wrote: > Hi all, > > Just a small

[Wikitech-l] Re: Looking for opinions on PHPSessionHandler::gc behavior and Timezones

That does sound like a bug. I would suggest filing a task about it at https://phabricator.wikimedia.org where it can be discussed further (feel free to add me as a subscriber). Optionally, if you are feeling ambitious, you can also submit a patch in gerrit. -- Bawolff On Friday, May 6, 2022,

[Wikitech-l] Re: [Wikitech-ambassadors] Wikimedia Hackathon: Call for Sessions

While i don't know the specifics of the situation you encountered, a common view (not the only view) is priority should be set by people who are going to do the work to fix the bug (or in consultation with them), except for "unbreak now". This may or may not be WMF staff. The problem is that

[Wikitech-l] Re: Different cache invalidation rules for similar users?

Its possible that different cache clusters have different versions of a cached file. Different ways of loading js have different cache characteristics (e.g. some have much less purging) so it can depend a bit on method. Its also possible that one datacenter missed a cache purge the others did

[Wikitech-l] Re: [Wikimedia-l] Uplifting the multimedia stack (was: Community Wishlist Survery)

While i'm sure there is always more that can be done in terms of attracting new devs, i don't think that's really where we have the problem. We have lots of interested people. Enwiki is basically a huge captive audience of interested people. I think the problem lies more in the developer

[Wikitech-l] Re: Wikitext, Document Models, and HTML5 Output

Have you seen the html structure of parsoid? E.g. https://en.wikipedia.org/api/rest_v1/page/html/Dog -- Bawolff On Monday, January 10, 2022, Adam Sobieski wrote: > Wikitech-l, > > > > Hello. I have a question about the HTML output of wiki parsers. I wonder > about how simple or complex that it

[Wikitech-l] Re: Limit to the number of images in a page?

This isn't a per page limit but a number of thumbnails per unit time. Wait a little bit and revisit the page and more pictures should load. Eventually all should. As long as nobody purges the image pages, once the image loads once it should always load again in the future. The current limits are

[Wikitech-l] Re: Proposal: new structure for MediaWiki RELEASE-NOTES

> We could write a custom merge driver for RELEASE-NOTES which always puts ‘ours’ before ’theirs’, but I’m not sure the result will justify the investment. Didnt someone already do that? There used to be a ruby script floating around for that. On Monday, July 19, 2021, Petr Pchelko wrote: >

[Wikitech-l] Re: Upstream shutdowns

Also HHVM and Blazegraph. -- Brian On Tuesday, June 1, 2021, Kunal Mehta wrote: > On 5/29/21 5:59 PM, Brian Wolff wrote: > >> It sounds like phabricator upstream is going away: >> https://admin.phacility.com/phame/post/view/11/phacility_is_ >> winding

[Wikitech-l] Phabricator upstream shutdown

It sounds like phabricator upstream is going away: https://admin.phacility.com/phame/post/view/11/phacility_is_winding_down_operations/ Just curious, are we planning to continue using it long term or move to something else? -- Brian ___ Wikitech-l

Re: [Wikitech-l] Dynamically declaring parser functions?

Why not just use the normal magic i18n file? You could just not load it when you don't want it. -- Brian On Sunday, April 18, 2021, FreedomFighterSparrow < freedomfighterspar...@gmail.com> wrote: > My use case is this: > > I have three alternative access points to the wiki, where some things

Re: [Wikitech-l] 1st CfP: SEMANTiCS 2021 EU || Sep 6 - 9, 2021 || Amsterdam, The Netherlands

Normally i avoid +1 posts, but since Max is getting some criticism, I wanted to say I also think that this particular conference is off topic to this mailing list and should be posted in a more appropriate venue. -- Brian On Friday, December 25, 2020, Dan Garry (Deskana) wrote: > I agree with

Re: [Wikitech-l] Hard deprecation of the Revision class

Hard deprecated = generates warnings if $wgEnableDevelopmentWarnings is on (which in turn cause unit tests to fail, as warnings are considered errors in a test). The code is still there and working for the moment. -- Brian On Monday, July 6, 2020, Jay R. Ashworth wrote: > > I think you might

Re: [Wikitech-l] SelectQueryBuilder

That's really cool. It would be interesting if we could use this as an excuse to move away from what i would consider antipatterns in our sql layer e.g., having no high level way of specifying WHERE comparisons (x > "foo". Currently we do addQuotes() instead of automatic or `field1` = `field2`).

Re: [Wikitech-l] Render with a slow process

Can you be a bit more concrete in what you are thinking of. In general i think most users would find it unacceptable if part of the page was only available after some slow (<1 min) amount of time after the page rendered. The closest things i can think of to this is image rendering (and

Re: [Wikitech-l] What is "revision slot" and why is it necessary to specify it now?

It is where a page can have multiple content handlers associated with it. The most common example is commons file pages. They have normal wikitext page, but they also have a slot containing wikidata-style data structured data. Whether or not you have to worry about this depends on what you're

Re: [Wikitech-l] [WikiEdDiff] Review wanted

Umm, what is with the sgndrp.online tracker urls? -- Bawolff On Saturday, February 29, 2020, Aron Demian wrote: > On Sat, 29 Feb 2020 at 21:50, Zoran Dori wrote: > > > Hmm, URL works only in old UI, not in new. > > > Didn't work for me even in the old one. Please submit a working link next >

Re: [Wikitech-l] Tech Talk livestream chat transcript (was Re: [Wikimedia Technical Talks] Data and Decision Science at Wikimedia with Kate Zimmerman, 26 February 2020 @ 6PM UTC)

Note: the list of who has access (both wmf and otherwise) is at https://github.com/wikimedia/puppet/blob/3f7e6a775321e993c001a85ede736d2db087d3e0/modules/admin/data/data.yaml#L270 (there are also some other groups that are probably relevant). This of course wouldnt include people who got specific

Re: [Wikitech-l] "Chain verification error" when trying to log-in to Beta cluster

The ssl tester site is reporting that ocsp stapling is misconfigured on that domain, maybe that's causing the issue(?) One of the biggest differences is that beta uses lets encrypt. If for some reason the platform you are testing on didnt have lets encrypt certs installed, that could cause this.

Re: [Wikitech-l] Community Tech: New Format for 2020 Wishlist Survey

One concern id have if this approach is scaled up, is what happens to maintenance of these projects after they are done? Not that this isnt a problem with traditional teams too, but with the wishlist approach it seems like it would be all the more problematic, especially for larger projects. --

Re: [Wikitech-l] WebTestCase

I think selenium is often used for that use case https://www.mediawiki.org/wiki/Selenium/Node.js/Simple -- Bawolff On Tuesday, October 1, 2019, Jeroen De Dauw wrote: > Hey, > > Does MediaWiki have something similar to Symfony's WebTestCase? ( >

Re: [Wikitech-l] [Outreachy Round 19] Contribution period is now open!

Just in case anyone had the same question as i did, the campaign project is in the context of wiki education dashboard (I was originally assuming upload wizard campaigns). Good luck to all the participants. -- Brian On Tuesday, October 1, 2019, Srishti Sethi wrote: > Hello everyone, > >

Re: [Wikitech-l] PLURAL in mw.msg

I think you need to load mediawiki.jqueryMsg module otherwise these interfaces do totally different things. Personally im not really a fan of this as i dont like the idea that methods randomly change meaning based on what modules are loaded, but it is what it is. -- Bawolff On Sunday,

Re: [Wikitech-l] LoginSignupSpecialPage.php form won’t let me add fields

If you havent seen it, the docs at https://www.mediawiki.org/wiki/Manual:SessionManager_and_AuthManager/Adding_fields_to_the_registration_form may be helpful. -- Brian On Saturday, September 21, 2019, John Shepherd wrote: > Hello all, > > On my own mediawiki install, I am trying to add another

Re: [Wikitech-l] Statistics for CoC Cases Term May 2018 to May 2019

One thing im kind of curious about: Were any of these cases appealed? If so how many and what is the "success" rate of the appeals process? -- Brian On Thursday, September 5, 2019, Amir Sarabadani wrote: > Hello, > The committee received several reports for cases that were out of our >

Re: [Wikitech-l] Category aliasing proposals

Re other attempts - have you seen https://gerrit.wikimedia.org/r/#/c/mediawiki/core/+/65176/ ? Beyond that some people have talked about using wikidata stuff instead of categories, but im not sure how seriously. -- Brian On Monday, August 5, 2019, Adam Wight wrote: > Friends, > > As part of

Re: [Wikitech-l] Coolest Tool Award 2019: Call for Nominations

To clarify, does this mean tool in the sense of "tool"server? (Aka coolest thing hosted using cloud services) or is it more general including gadgets, standalone apps or any other piece of technology in the wikimedia ecosystem that's "cool"? -- Bawolff On Tuesday, July 16, 2019, Birgit Mueller

Re: [Wikitech-l] Dealing with composer dependencies in early MediaWiki initialization

Another option is just removing the $wgServer back compat value. The installer will automatically set $wgServer in LocalSettings.php. The default value in DefaultSettings.php is mostly for compat with really old installs before 1.16. Allowing autodetection is a security vulnerability - albeit

Re: [Wikitech-l] 今週あなたを幸せにするものは何ですか？ / What's making you happy this week? (Week of 16 June 2019)

I personally think these threads are fine (within reason) if they are thankful about technical things and/or stuff connected to mediawiki. Generic things about the wikimedia movement should stay on wikimedia-l; we have multiple mailing lists with different scopes for a reason. In that light, I

Re: [Wikitech-l] My views on the proposed projects for GSoC '19

Hi Kaushik, You are welcome to suggest your own projects for gsoc. If your interest is in data science you may want to read up on some of the stuff that the analytics team does. Different areas have different programming language requirements. For example SRE often uses python. I think analytics

Re: [Wikitech-l] Old tiles.wfmlabs.org maps services need maintainers to keep them alive after december 18th

That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool. -- brian On Friday, December 14, 2018, Alexander Vassilevski < alexan...@vassilevski.com> wrote: > I created

Re: [Wikitech-l] +2 nomination for Alangi Derick (D3r1ck01) in mediawiki/*

I have closed this as successful. Congratulations D3r1ck! -- Brian On Sat, Nov 17, 2018 at 11:36 PM Brian Wolff wrote: > > I'd like to nominate D3r1ck01 for +2 rights in mediawiki/*. See > https://phabricator.wikimedia.org/T209775 for details. > > > Copying the contents o

[Wikitech-l] +2 nomination for Alangi Derick (D3r1ck01) in mediawiki/*

I'd like to nominate D3r1ck01 for +2 rights in mediawiki/*. See https://phabricator.wikimedia.org/T209775 for details. Copying the contents of the ticket below: I'd like to nominate Alangi Derick (@D3r1ck01) for +2 on mediawiki/*. He's been around for a while now (First merged commit was to

Re: [Wikitech-l] Looking for maintainers: RelatedSites

Lots of extensions are maintainerless. I dont see why that implies it will eventually have to be archived. Perhaps the day will come when it no longer works with modern mediawiki, but until that day comes, why not leave it be? -- brian On Monday, November 5, 2018, Max Semenik wrote: > As

Re: [Wikitech-l] problematic use of "Declined" in Phabricator

Declined = WONTFIX (e.g. if some talented developer wrote a patch, and the patch was perfect, you would still -2 it because the functionality is not wanted/stupid/etc) Invalid = not a real bug. That should include things like spam, stuff where the reporter is mistaken ( can't reproduce or if

Re: [Wikitech-l] My Phabricator account has been disabled

. The ban > is made to prevent further damage. > > Best > > On Tue, Aug 14, 2018, 22:23 Brian Wolff wrote: > >> Given that many of our users are from wikipedia, and as far as i understand >> (I am not a wikipedian), on Wikipedia, using increasing length blocks

Re: [Wikitech-l] My Phabricator account has been disabled

Given that many of our users are from wikipedia, and as far as i understand (I am not a wikipedian), on Wikipedia, using increasing length blocks as as a punative punishment for rule infractions isn't allowed, I would guess many of our community don't see it valid to block people temporarily just

Re: [Wikitech-l] My Phabricator account has been disabled

Thanks Amir for clarifying this. This is the first I remember hearing this was the reason for the sactions against mcbride, and differs significantly from what I assumed was the reason. However, MZMcbride has also claimed his comment was in exasperation after facing the same breach of the CoC you

Re: [Wikitech-l] Making two factor auth less annoying

While there are two people in this thread complaining so i suspect its not that obscure, but this is also the first i have ever heard of it as well. Definitely something we need to track down. -- Brian On Monday, August 13, 2018, Daniel Kinzler wrote: > Am 13.08.2018 um 07:34 schrieb Gergo

Re: [Wikitech-l] My Phabricator account has been disabled

Wikimedia-l is not a technical mailing list. That said I personally think that any sort of effective CoC would have take actions on other spaces into account when it is about a matter that is in coc juridsiction (otherwise harrasment would just move off wiki). The more concerning part to me is

Re: [Wikitech-l] My Phabricator account has been disabled

While what are we arguing then? I think i have lost track. -- brian On Wednesday, August 8, 2018, Ryan Kaldari wrote: > It's possible to highlight abuses while still being respectful and > collegial. No one is seriously arguing that criticism should be banned (or > the word "fuck"). > > On Wed,

Re: [Wikitech-l] Creation of new mediawiki/extensions/** group in gerrit

To clarify, would the proposed new group be for all extensions, or just non-WMF deployed extensions (and i suppose allow others to opt out as well if they so desire)? -- brian On Tuesday, July 24, 2018, Jay prakash <0freerunn...@gmail.com> wrote: > Hello Everyone, > > This is Jay. I have some

Re: [Wikitech-l] +2 nomination for MarcoAurelio in mediawiki/*

Wow. That is kind of a sad statistic :( -- brian On Wednesday, June 20, 2018, Kunal Mehta wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > I've closed the request as successful. Congrats to MarcoAurelio for > being the first new volunteer +2'er since 2016! > > - -- Legoktm > > On

Re: [Wikitech-l] [Multimedia] Video output changing to WebM VP9/Opus soon

Woo! Good to see us moving forward to newer codecs. What is the expected impact on transcode time/memory usage? (As in, will large videos still transcode fine or would they potentially hit limits sooner?) -- brian On Sunday, June 17, 2018, Brion Vibber wrote: > In the next couple weeks I'm

Re: [Wikitech-l] Gerrit as a shared community space

Taking a step back here... I agree with you in principle...but Shared spaces imply that occasionally disputes are going to arise as to what belongs in a repo. If we dont have a fair method of resolving such disputes (/my way or the highway/ is not fair), then this model is not going to work. --

Re: [Wikitech-l] Can/should my extensions be deleted from the Wikimedia Git repository?

On Friday, June 8, 2018, Chris Koerner > [snip] > There are voices not present in this very public conversation. I have > been approached by a few that do not feel comfortable participating > here. I don't want to see anyone's contributions deleted. I also don't > want to see an exception made in

Re: [Wikitech-l] Can/should my extensions be deleted from the Wikimedia Git repository?

On Friday, June 8, 2018, Chris Koerner wrote: >> I for one think that requiring a specific filesystem structure or notice in >> a git repo is quite far afield from the sorts of things that CoC is >> designed to deal with. > > I agree. I do think that as a community of practice we have many >

Re: [Wikitech-l] Can/should my extensions be deleted from the Wikimedia Git repository?

I for one think that requiring a specific filesystem structure or notice in a git repo is quite far afield from the sorts of things that CoC is designed to deal with. -- Brian On Thursday, June 7, 2018, Chris Koerner wrote: > “Please just assume for the sake of this discussion that (a) I'm

Re: [Wikitech-l] RFC discussion: the future of rev_parent_id

On Monday, June 4, 2018, Daniel Kinzler wrote: > Am 04.06.2018 um 20:54 schrieb Leon Ziemba: >>> ... the size differences shown on the history and contributions pages, >> which is the only thing that rev_parent_id is used for >> >> This may be true in MediaWiki but not so much for external tools.

Re: [Wikitech-l] [nominations needed] Wikimedia Technical Conference

The survey cannot be opened (gives a permission error. Presumably its only working if you are logged in to a WMF google account) Additionally, I wish there was more information about what basis we are supposed to be nominating people on. Its not even clear under what category of person we are

Re: [Wikitech-l] Recent Account hijacking activities

Forcing people to change passwords regularly does tend to reduce overall password security because people tend to get very tired of the process and will start to pick really poor passwords. That doesn't mean you should never change your password - changing your password from time to time, as long

[Wikitech-l] Proposal: Add security researchers to CREDITS file & [[Special:Version/credits]]

Hi everyone, Currently we only credit people who report security vulnerabilities at https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Thanks (which basically nobody reads or knows exists) and sometimes in the commit message and release announcements. Given such people are instrumental in

Re: [Wikitech-l] Introduction : Tanvi Dadu ( GSoC 2018)

Welcome Tanvi! -- Brian On Tuesday, April 24, 2018, Tanvi Dadu wrote: > Greetings ! > > I am Tanvi Dadu, GSoC 2018 participant . I will be implementing Feedback > Sharing Module in Commons App and > quiz >

Re: [Wikitech-l] File upload file in HTMLForm with ooui

gt; > if I only specify one I get this exception: > > ... > > Descriptor with no class for fileupload: Array > ( > [section] => upload > [label] => Upload file > [type] => file > [class] => > ) > > ... > > Not using ooui, both are needed and it

Re: [Wikitech-l] File upload file in HTMLForm with ooui

Im not sure, but having the class specified as HTMLTextField looks wrong (type & class are mutually exclusive. You should only specify one). -- Brian On Sunday, April 15, 2018, Toni Hermoso Pulido wrote: > Hello, > > I'm trying to migrate a HTMLForm to use ooui > > by following

Re: [Wikitech-l] Incoming and outgoing links enquiry

Hi, You can run longer queries by getting access to toolforge ( https://wikitech.wikimedia.org/wiki/Portal:Toolforge) and running from the command line. However the query in question might still take an excessively long time (if you are doing all of wikipedia). I would expect that query to

Re: [Wikitech-l] What ways are there to include user-edited JavaScript in a wiki page? (threat model: crypto miners)

method that does not involve editinterface or a related right that is normally restricted to administrator (or higher group) should be considered a serious security issue in mediawiki and reported immediately. -- Brian Wolff ___ Wikitech-l mailing list Wikite

Re: [Wikitech-l] TechCom Radar, 2018-02-14

Umm, why would you want that over just looking at the page views for a page? If its a, people navigating to a page internally vs externally, it would be probably better to try to convince analytics to break down the page view data between local and external referrers instead of relying on a url

Re: [Wikitech-l] Security question re password resets and Spectre

[This is kind of getting far afield of mediawiki, but...] Spectre can potentially be used to read your private (bitcoin) keys, so bitauth is just as vulnerable to it as anything else (assuming keys on your computer and not some hardware token setup). The only benefit i see is that bitauth would

Re: [Wikitech-l] Security question re password resets and Spectre

Labs and production machines are separate machines. An attack on labs in the worst case would only be able to attack other labs users. As Cyken said, one of the very scary scenarios is js getting access to data it should not have access to (e.g. if your inputting your password in one tab and a

Re: [Wikitech-l] Security question re password resets and Spectre

No, spectre/meltdown wouldnt apply to that situation. The meltdown/spectre vulnerabilities is all about computer programs having access to data they should not. In order to exploit the attacker must be able to run computer programs on the victims computer. -- brian On Thursday, January 4, 2018,

Re: [Wikitech-l] Deprecation + phan issue

I agree with this. Splitting the deprecation phan issues out to a separate non-voting job sounds like a good idea (and should be easily supported by phan with its issue whitelist/blacklist config directive) Ideally we would have a phan plugin that generates warnings for hard deprecations

Re: [Wikitech-l] Many spurious RefreshLinksDynamic jobs in Queue

DynamicRefreshLinks jobs are meant in cases where links vary pretty much randomly (e.g. you have something on the page causing a low cache time). The idea being that code like [[category:Foo {{CURRENTHOUR}}]] should have categories refreshed regularly and not just during edit. The

Re: [Wikitech-l] Announcing a new security testing tool for MediaWiki extensions "phan-taint-check-plugin"

will let you do this, and I assume other installation methods will let you do this too. Thanks, Brian On Thursday, December 14, 2017, Tom Bishop, Wenlin Institute < tan...@wenlin.com> wrote: > > >> On Dec 11, 2017, at 4:09 PM, Brian Wolff <bwo...@wikimedia.org> wrote: >

[Wikitech-l] Announcing a new security testing tool for MediaWiki extensions "phan-taint-check-plugin"

Hello everyone, For the last little while I have been working on a new tool to automatically detect common security issues in MediaWiki extensions. The tool can detect a number of issues, including: * XSS ** We include here using wfMessage( 'foo' )->text() when you should have used

Re: [Wikitech-l] FLIF for Wikimedia

Maybe not a hard no, but I would rate the probability as somewhere around 1%. If you really wanted to push this (with the understanding that its probably not going anywhere) I would say make a report, comingup with a solid case with a solid implementation plan, including: * what is the fallback

Re: [Wikitech-l] Fwd: Re: [Wikidata] Imperative programming in Lua, do we really want it?

Lua is used for many purposes - some of which I think are well suited to an imperaive approach (or at least would be totally fine to do in an imperative style). There are of course many cases where an imperative approach would be a poor choice. There are no rules that apply to all programming

Re: [Wikitech-l] FLIF for Wikimedia

An encode latency of 7 seconds and decode latency of 1 second arent what I would call "very fast" (the decode latency measurement probably isnt realistic as decode and encode to png is different from just display in browser. Then again all these measurements are going to vary by filesize, not to

Re: [Wikitech-l] Proposal for a developer support channel

any better solution to the spam issue. -- bawolff On Sun, Nov 19, 2017 at 3:33 AM, Brian Wolff <bawo...@gmail.com> wrote: > Neither project:support_desk nor project:current_issues is really meant for > that purpose - support desk is mainly for user and (external) sysadm

Re: [Wikitech-l] Proposal for a developer support channel

irst >> > question about any topic in one place with a familiar UI is a big >> > improvement over having to figure out a disseminated landscape of wiki Talk >> > pages, mailing lists and IRC channels (especially if they are not used to >> > any of these environmen

Re: [Wikitech-l] Proposal for a developer support channel

On Friday, November 17, 2017, Quim Gil wrote: > Hi, > > The Technical Collaboration team proposes the creation of a developer > support channel focusing on newcomers, as part of our Onboarding New > Developer program. We are proposing to create a site based on Discourse >

Re: [Wikitech-l] Security release: 1.29.2 / 1.28.3 / 1.27.4

Hi, I believe they are coming. -bawolff On Wednesday, November 15, 2017, Seb35 wrote: > Hi! > > There is no corresponding Git tags 1.29.2, 1.28.3, 1.27.4, could someone > issue them? > > I guess they are respectively ee7f9fe, 5b85506, a806476. > > Thanks! > ~ Seb35 >

Re: [Wikitech-l] PHPUnit error: Cannot access the database: Unknown database

Try passing --wiki wiki As a command line argument to the script. (Assuming wiki is the db name. Otherwise pass --wiki dbname_here ) -- bawolff On Wednesday, October 25, 2017, Sebastian Berlin < sebastian.ber...@wikimedia.se> wrote: > I'm having trouble running PHPUnit for the extension I'm

Re: [Wikitech-l] Roadmap for continued compatibility with MySQL

On Thursday, October 19, 2017, Hogan, Michael C wrote: > How many years into the future is it reasonable to expect that MySQL will remain a recommended database server for "production use" along with MariaDB now that the Foundation has switched to using MariaDB

Re: [Wikitech-l] [Wmfall] New Developers Quarterly Report's first edition

On Tue, Oct 17, 2017 at 7:03 PM, Srishti Sethi wrote: > Hello everyone, > > > I would like to share the first edition of the New Developers Quarterly > Report that the Developer Relations team has produced. This report covers > metrics, survey analysis and lessons learned

Re: [Wikitech-l] Person of interest to blame

Realistically its probably in the enhancedChanges list base class somewhere and not watchlist itself. -- bawolff On Tuesday, October 3, 2017, C. Scott Ananian wrote: > git log includes/specials/SpecialWatchlist.php suggests: > > T172757 /

Re: [Wikitech-l] Writing unit tests for extensions that use dbr calls

Try adding $this->tablesUsed[] = 'cacao_annotation'; To the setUp() method of your tests -- brian On Wednesday, September 27, 2017, Jim Hu wrote: > I’m trying to improve my coding practices for our MW extensions, and I’m very confused by whether my problem with

  1   2   3   4   5   6   7   >