MediaWiki-l June 2012

mediawiki-l@lists.wikimedia.org

43 participants
46 discussions

Upcoming hackathon for experts AND newbies: Washington, DC, USA July 10-11
by Sumana Harihareswara 18 Jun '12

18 Jun '12

This is a reminder that you're invited to the pre-Wikimania hackathon, 10-11 July in Washington, DC, USA: https://wikimania2012.wikimedia.org/wiki/Hackathon In order to come, you have to register for the Wikimania conference: https://wikimania2012.wikimedia.org/wiki/Registration (Unfortunately, the period for requesting scholarships is now over.) At the hackathon, we'll have trainings and projects for novices, and we welcome creators of all Wikimedia technologies -- MediaWiki, gadgets, bots, mobile apps, you name it -- to hack on stuff together and teach each other. Hope to see you! -- Sumana Harihareswara Engineering Community Manager Wikimedia Foundation

1 0

problem with Collection extension.
by Marcelo Chiaradía 18 Jun '12

18 Jun '12

Hi everyone, I have installed the Collection Extension, wich among other features, allows us to export the wiki pages to PDF files. It workes great, but when I export a page as PDF, the PDF file includes all the info boxes as well. Is there any way to export pages as PDF file without including the infoboxes? Cheers, Marcelo.

1 0

Safe Backup for Public distribution
by Eric K 16 Jun '12

16 Jun '12

For most of us, our sites are very important to us and we want to make sure they continue existing. One way is to make sure that data backups exist in multiple places. What's the best way to have a publicly downloadable backup, which is simply the present text in all the pages, and perhaps the uploaded files too? I wouldn't want the full database backup because it contains usernames and passwords in the user tables. Additionally it could also be small in size (so earlier versions dont have to be included) and it could be generated by demand so it would be automatic. I've seen the XML backup option and I wonder if any of you are doing that with some specific options or doing something else. Eric

2 1

Does any one use varnish?
by 晒太阳的冰 15 Jun '12

15 Jun '12

I tried to convert the config from http://www.mediawiki.org/wiki/Manual:Varnish_caching to 3.X version Here is the result:http://pastie.org/4083893 But unfortunately, only 20% hit rate. Does anyone use varnish can teach me how to increase the hit rate?

2 1

MediaWiki security release 1.19.1
by Sam Reed 13 Jun '12

13 Jun '12

I would like to announce the release of MediaWiki 1.19.1. One security issue was discovered. Both Chris Steipp and Formafix discovered that the uselang http parameter was vulnerable to XSS. For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=36938 Chris Steipp also improved the blacklisting of bad elements in SVG files. This includes catching known hostile files, and also disallowing the upload of svg files that include remote resources. This is work is part of an on-going effort to prevent exploits being hidden in uploaded SVG files. MediaWiki 1.19.1 also received a couple of other non-security bugfixes. Full release notes: https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob_plain;f=RE LEASE-NOTES-1.19;hb=1.19.1 https://www.mediawiki.org/wiki/Release_notes/1.19 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.1.tar.gz Patch to previous version (1.19.0): http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.1.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.1.tar.gz.sig http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.1.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html

1 0

MediaWiki security release 1.18.4
by Sam Reed 13 Jun '12

13 Jun '12

I would like to announce the release of MediaWiki 1.18.4. One security issue was discovered. Both Chris Steipp and Formafix discovered that the uselang http parameter was vulnerable to XSS. For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=36938 Chris Steipp also improved the blacklisting of bad elements in SVG files. This includes catching known hostile files, and also disallowing the upload of svg files that include remote resources. This is work is part of an on-going effort to prevent exploits being hidden in uploaded SVG files. Full release notes: https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob_plain;f=RE LEASE-NOTES-1.18;hb=1.18.4 https://www.mediawiki.org/wiki/Release_notes/1.18 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.4.tar.gz Patch to previous version (1.18.3): http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.4.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.4.tar.gz.sig http://download.wikimedia.org/mediawiki/1.18/mediawiki-1.18.4.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html

1 0

MediaWiki security release 1.17.5
by Sam Reed 13 Jun '12

13 Jun '12

I would like to announce the release of MediaWiki 1.17.5. One security issue was discovered. Both Chris Steipp and Formafix discovered that the uselang http parameter was vulnerable to XSS. For more details, see https://bugzilla.wikimedia.org/show_bug.cgi?id=36938 Chris Steipp also improved the blacklisting of bad elements in SVG files. This includes catching known hostile files, and also disallowing the upload of svg files that include remote resources. This is work is part of an on-going effort to prevent exploits being hidden in uploaded SVG files. Full release notes: https://gerrit.wikimedia.org/r/gitweb?p=mediawiki/core.git;a=blob_plain;f=RE LEASE-NOTES;hb=1.17.5 https://www.mediawiki.org/wiki/Release_notes/1.17 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.5.tar.gz Patch to previous version (1.17.4): http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.5.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.5.tar.gz.sig http://download.wikimedia.org/mediawiki/1.17/mediawiki-1.17.5.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html

1 0

Party
by D3xRañ 13 Jun '12

13 Jun '12

1 0

Grand allumni
by D3xRañ 13 Jun '12

13 Jun '12

1 0

Birthday
by D3xRañ 13 Jun '12

13 Jun '12

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l June 2012