Smalyshev added a comment.

> Will the query service return raw HTML or SVG content?


Check out: https://wiki.blazegraph.com/wiki/index.php/REST_API#QUERY. The 
formats query accepts are XML and JSON.

However, I don't think we do URL filtering now which means one could access not 
only the query URL but also other URLs which could potentially store or produce 
HTML, now or in the future. We could add more strict limits on which URLs are 
passed to blazegraph and limit it to just query URL. I'll add a task for that.

> An alternative to a separate domain could be to use something like 
> https://wikidata.org/api/query_v1/


Not sure how this solves the issue - wouldn't it still be on wikidata.org and 
thus come under *.wikidata.org permissions?


TASK DETAIL
  https://phabricator.wikimedia.org/T107602

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Joe, Smalyshev
Cc: GWicke, greg, Lydia_Pintscher, csteipp, jcrespo, Legoktm, gerritbot, 
Smalyshev, BBlack, Joe, daniel, RobLa-WMF, Aklapper, aude, JanZerebecki, 
JeroenDeDauw, MrStradivarius, waldyrious, Krenair, MBlissett, bd808, Laddo, 
Addshore, Matanya, jkroll, Wikidata-bugs, Jdouglas, RobH, Manybubbles, mark, 
faidon, fgiunchedi, Dzahn, chasemp, Malyacko, P.Copp



_______________________________________________
Wikidata-bugs mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to