Hi!
We are discussing on Commons list (http://lists.wikimedia.org/pipermail/commons-l/2008-November/004338.html) possible support for Chemical Markup Language (http://cml.sourceforge.net) and Jmol viewer (http://jmol.sourceforge.net).
Extension for MediaWiki is already implemented (http://wiki.jmol.org/index.php/MediaWiki). However it was done for 1.12 and some security concerns exists. Will be great if somebody will review extension code and adapt it to current MediaWiki state if necessary.
Eugene.
On Fri, 28 Nov 2008 08:13:59 -0800, Eugene Zelenko eugene.zelenko@gmail.com wrote:
Hi!
We are discussing on Commons list (http://lists.wikimedia.org/pipermail/commons-l/2008-November/004338.html) possible support for Chemical Markup Language (http://cml.sourceforge.net) and Jmol viewer (http://jmol.sourceforge.net).
Extension for MediaWiki is already implemented (http://wiki.jmol.org/index.php/MediaWiki). However it was done for 1.12 and some security concerns exists. Will be great if somebody will review extension code and adapt it to current MediaWiki state if necessary.
Eugene.
The problem that the Jmol extension worked with 1.12 but not with recent versions has been fixed. That is now in the latest svn release of Jmol. This has just been announced on the jmol e-mail list. I was the one who raised the issue of jmol on wikipedia in response to the post on the commons list and I also discussed it with Tim Starling a couple of years ago. The only security concerns are the ones that Tim raised then. The extension has been modified since then but I do not know whether there are still security concerns. I am not competent to judge. Please e-mail me if you want links to examples of the extension running.
Brian.
Brian Salter-Duke wrote:
The problem that the Jmol extension worked with 1.12 but not with recent versions has been fixed. That is now in the latest svn release of Jmol. This has just been announced on the jmol e-mail list. I was the one who raised the issue of jmol on wikipedia in response to the post on the commons list and I also discussed it with Tim Starling a couple of years ago. The only security concerns are the ones that Tim raised then. The extension has been modified since then but I do not know whether there are still security concerns. I am not competent to judge. Please e-mail me if you want links to examples of the extension running.
Brian.
See https://bugzilla.wikimedia.org/show_bug.cgi?id=16491 That users can embed javascript is not acceptable to run it on Wikipedia. Other parameters, like urlContents or signed wouldn't be used but at least they can be disabled.
On Sun, 30 Nov 2008 00:50:08 +0100, Platonides Platonides@gmail.com wrote:
Brian Salter-Duke wrote:
The problem that the Jmol extension worked with 1.12 but not with recent versions has been fixed. That is now in the latest svn release of Jmol. This has just been announced on the jmol e-mail list. I was the one who raised the issue of jmol on wikipedia in response to the post on the commons list and I also discussed it with Tim Starling a couple of years ago. The only security concerns are the ones that Tim raised then. The extension has been modified since then but I do not know whether there are still security concerns. I am not competent to judge. Please e-mail me if you want links to examples of the extension running.
Brian.
See https://bugzilla.wikimedia.org/show_bug.cgi?id=16491 That users can embed javascript is not acceptable to run it on Wikipedia. Other parameters, like urlContents or signed wouldn't be used but at least they can be disabled.
I am afraid this is all beyond my expertise. Are you saying that there is no way Jmol can ever be used on WMF projects?
Brian.
On Sun, Nov 30, 2008 at 1:11 AM, Brian Salter-Duke b_duke@bigpond.net.au wrote:
On Sun, 30 Nov 2008 00:50:08 +0100, Platonides Platonides@gmail.com wrote:
See https://bugzilla.wikimedia.org/show_bug.cgi?id=16491 That users can embed javascript is not acceptable to run it on Wikipedia. Other parameters, like urlContents or signed wouldn't be used but at least they can be disabled.
I am afraid this is all beyond my expertise. Are you saying that there is no way Jmol can ever be used on WMF projects?
There is, as soon as the Javascript embedding possibility gets disabled and the extension gets a proper review (TM).
Marco