Re: [Wikivi-l] [Fwd: Comprehensive template expansion size limit]

From: clytie(a)riverland.net.au&gt; Date: Fri, 11 Aug 2006 21:21:34 +0930> To: wikivi-l(a)mail.wikimedia.org&gt; Subject: Re: [Wikivi-l] [Fwd: Comprehensive template expansion size limit]> > Em Trung, thay đổi này có tác động lên bộ chuyển đổi > Việt-IPA của em tại Wiktionary-VI phải không?> > Nó giới thiệu một sự hạn chế kích cỡ sự mở rộng > biểu mẫu (cấu hình theo $wgMaxArticleSize, rất có thể là > 1 MB trên Wikimedia). Thay đổi này tránh một số trường > hợp bị lỗ hổng bảo mật, nhưng mà chúng ta cần phải > kiểm tra xem nó không bể bài nào trong miền tiếng Việt.> > On 10/08/2006, at 6:26 PM, Minh Nguyen wrote:> > > I know this won't be an issue with the month calendar template that > > I wrote at Wikipedia [1], but will this possibly break Trần Thế > > Trung's very complex Viet->IPA converter at Wiktionary [2]? It > > probably doesn't, but we should make sure: since Tim Starling isn't > > going to make this change for a few days, we have time to subst: > > the template if anything will get broken.> >> > [1] http://vi.wikipedia.org/wiki/Ti%C3%AAu_b%E1%BA%A3n:L%E1%BB% > > 8Bch_th%C3%A1ng_n%C3%A0y> > [2] http://vi.wiktionary.org/wiki/Ti%C3%AAu_b%E1%BA%A3n:VieIPA> > -- > > Minh Nguyen &lt;mxn(a)zoomtown.com&gt;&gt; > AIM: trycom2000; Jabber: mxn(a)myjabber.net; Blog: http://mxn.f2o.org/> >> > From: Tim Starling <t.starling-JAjqph6Yjy > > +R5oW9C2NzqLs0Z2mYlMph(a)public.gmane.org&gt;&gt; > Date: 10 August 2006 5:26:33 AM> > Cc: wikitech-l-AeOJrEpdGNeGglJvpFV4uA(a)public.gmane.org&gt; > Subject: Comprehensive template expansion size limit> > Reply-To: wikipedia-l-T31ubCBy5U6GglJvpFV4uA(a)public.gmane.org&gt; >> >> > I have in my working copy a set of changes introducing a comprehensive> > template expansion size limit. The limit is configurable (by> > $wgMaxArticleSize), and will probably be set to 1 MB on Wikimedia. > > This> > prevents a number of DoS vulnerabilities, such as the exponential > > argument> > substitution attack that we've known about for some time.> >> > The output size of template expansion has long been limited to 1MB, > > limiting> > several attacks. But it was possible to evade this limit by forcing > > the> > parser to parse a large chunk of text, and then throwing away the > > result,> > say by putting it into an unused template parameter. The new > > behaviour is to> > limit both the pre-expansion size and the post-expansion size.> >> > This may break some articles, that's why I'm posting this to > > wikipedia-l. In> > particular, it will break articles which use {{#switch}} or similar> > constructs to extract many small fragments of text from large> > pseudo-databases. This practice is extremely inefficient, and I'd > > very much> > like to see it discontinued on the editorial level. This feature will> > probably only break the most flagrant cases, where article parse > > times were> > in the tens of seconds. I'm sure the other developers would agree > > -- we> > would be very grateful if the remaining cases could be dealt with > > by policy,> > as much as possible. I've been having a discussion with some > > Wikipedians> > along these lines at:> >> > http://en.wikipedia.org/wiki/Talk:TransLink_(South_East_Queensland) > > _services> >> > When the limit is hit, there will be HTML comments in the parser > > output> > indicating the problem. For all articles which use more than 1KB of> > templates, there will be an HTML comment at the bottom of the > > parser output> > showing how close the article is to the size limit. This allows > > technically> > capable users to monitor and optimise the expansion size of their > > templates.> >> > At this stage I would like to invite comments. The we can move > > forward to a> > trial, perhaps in a few days, if there are no objections.> >> > -- Tim Starling> >> >> > _______________________________________________> > Wikivi-l mailing list> > Wikivi-l(a)mail.wikimedia.org&gt; > http://mail.wikimedia.org/mailman/listinfo/wikivi-l> > Chị Clytie> > Clytie Siddall -- thành phố Renmark, tại miền Sông của > Nam Úc> > _______________________________________________> Wikivi-l mailing list> Wikivi-l(a)mail.wikimedia.org&gt; http://mail.wikimedia.org/mailman/listinfo/wikivi-l