On Sun, 30 Nov 2008 00:50:08 +0100, Platonides Platonides@gmail.com wrote:
Brian Salter-Duke wrote:
The problem that the Jmol extension worked with 1.12 but not with recent versions has been fixed. That is now in the latest svn release of Jmol. This has just been announced on the jmol e-mail list. I was the one who raised the issue of jmol on wikipedia in response to the post on the commons list and I also discussed it with Tim Starling a couple of years ago. The only security concerns are the ones that Tim raised then. The extension has been modified since then but I do not know whether there are still security concerns. I am not competent to judge. Please e-mail me if you want links to examples of the extension running.
Brian.
See https://bugzilla.wikimedia.org/show_bug.cgi?id=16491 That users can embed javascript is not acceptable to run it on Wikipedia. Other parameters, like urlContents or signed wouldn't be used but at least they can be disabled.
I am afraid this is all beyond my expertise. Are you saying that there is no way Jmol can ever be used on WMF projects?
Brian.