MediaWiki-l April 2013

mediawiki-l@lists.wikimedia.org

60 participants
51 discussions

Survey: best times for volunteering
by Quim Gil 16 Apr '13

16 Apr '13

Hi, please find 5 minutes for this survey: http://www.doodle.com/minqnd6ngz9npfdv In an *average* week, when are you more available to volunteer a couple of hours? Multiple choices are good. No registration required. VERY IMPORTANT: select your timezone! Deadline: end of Sunday, May 21. We want to organize activities for technical volunteers at the times that suit you best. But we have contributors with different habits in different parts of the World. This survey will help us covering better everybody's preferences. Thank you! -- Quim Gil Technical Contributor Coordinator @ Wikimedia Foundation http://www.mediawiki.org/wiki/User:Qgil

1 0

MediaWiki Security Release: 1.20.4 and 1.19.5
by Chris Steipp 15 Apr '13

15 Apr '13

I would like to announce the release of MediaWiki 1.20.4 and 1.19.5. These releases fix 3 security related bugs that could affect users of MediaWiki. Download links are given at the end of this email. * An internal review discovered that specially crafted Lua function names could lead to XSS. <https://bugzilla.wikimedia.org/show_bug.cgi?id=46084> * Daniel Franke reported that during SVG parsing, MediaWiki failed to prevent XML external entity (XXE) processing. This could lead to local file disclosure, or potentially remote command execution in environments that have enabled expect:// handling. <https://bugzilla.wikimedia.org/show_bug.cgi?id=46859> * Internal review also discovered that Special:Import, and Extension:RSS failed to prevent XML external entity (XXE) processing. <https://bugzilla.wikimedia.org/show_bug.cgi?id=47251> Full release notes for 1.20.4: <https://www.mediawiki.org/wiki/Release_notes/1.20> Full release notes for 1.19.5: <https://www.mediawiki.org/wiki/Release_notes/1.19> For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** 1.20.4 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.4.tar.gz Patch to previous version (1.20.3): http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.4.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.4.tar.gz.sig http://download.wikimedia.org/mediawiki/1.20/mediawiki-1.20.4.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** 1.19.5 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.5.tar.gz Patch to previous version (1.19.4): http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.5.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.5.tar.gz.sig http://download.wikimedia.org/mediawiki/1.19/mediawiki-1.19.5.patch.gz.sig Public keys: https://secure.wikimedia.org/keys.html ********************************************************************** Extension:RSS ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:RSS

1 0

Re: [MediaWiki-l] [Pywikipedia-l] Automatic generation of templates descriptions
by Yury Katkov 14 Apr '13

14 Apr '13

Pretty cool! It's really possible to generate the descriptions from that. thanks! ----- Yury Katkov, WikiVote On Sun, Apr 14, 2013 at 12:49 AM, Merlijn van Deen <valhallasw(a)arctus.nl> wrote: > Hi Yury, > > Cleaning up my pywikipedia backlog, and in the category 'better late > than never': > > On 6 August 2012 14:05, Yury Katkov <katkov.juriy(a)gmail.com> wrote: >> If no such extensions exists could anybody tell how to programaticaly get >> the parameters of a given template? > > The 'generatexml' function in the API should do roughly what you want: > > http://www.mediawiki.org/w/api.php?action=parse&page=Template:Gerrit-review… > > Then walk over all nodes using //tplarg/title > > Merlijn

1 0

Fwd: Recycling wikitech-announce for tech contributors
by Quim Gil 13 Apr '13

13 Apr '13

Summary: do you want to know about new opportunities to contribute your technical skills, but don't want to find them in a high traffic mailing list? Subscribe to receive call for action at https://lists.wikimedia.org/mailman/listinfo/wikitech-announce -------- Original Message -------- Subject: Recycling wikitech-announce for tech contributors Date: Sat, 13 Apr 2013 12:23:21 -0700 From: Quim Gil <qgil(a)wikimedia.org> Organization: Wikimedia Foundation To: Wikimedia developers <wikitech-l(a)lists.wikimedia.org> Hi, We were missing a way to notify tech contributors and volunteers about new activities, and after some discussion [1] we have decided to recycle the unused https://lists.wikimedia.org/mailman/listinfo/wikitech-announce Subscribers will receive CALLS FOR ACTION ONLY e.g. for activities like the ones listed at https://www.mediawiki.org/wiki/Project:Calendar. No announcements of new releases, features removed, etc. We have channels already for that. We will sync the announcements at wikitech-announce with with wikitech-l and wikitech-ambassadors. While this is not a big deal for current contributors following already wikitech-l and a number of wiki pages etc, it will help potential volunteers willing to get involved and know about opportunities to contribute. [1] https://www.mediawiki.org/wiki/Project_talk:New_contributors#How_to_solve_N… PS: before clicking reply please read http://www.gossamer-threads.com/lists/wiki/wikitech/282349 :) -- Quim Gil Technical Contributor Coordinator @ Wikimedia Foundation http://www.mediawiki.org/wiki/User:Qgil

1 0

Pre-Release Announcement for MediaWiki 1.19.5 and 1.20.4
by Chris Steipp 12 Apr '13

12 Apr '13

This is a notice that on Monday, April 15th between 20:00-21:00 UTC (1-2pm PDT) Wikimedia Foundation will release security updates for current and supported branches of the MediaWiki software. Downloads and patches will be available at that time, with the git repositories updated later that afternoon. CVSS scores are between 4.3 and 7.1, most users will want to update.

1 0

Fwd: Sponsoring travel to Wikimedia Hackathon
by Quim Gil 11 Apr '13

11 Apr '13

fyi -------- Original Message -------- Subject: Sponsoring travel to Wikimedia Hackathon Date: Thu, 11 Apr 2013 10:05:53 -0700 From: Quim Gil <qgil(a)wikimedia.org> Organization: Wikimedia Foundation To: Wikimedia developers <wikitech-l(a)lists.wikimedia.org> Hi, you have probably heard about Wikimedia Hackathon 24-26 May in Amsterdam (Netherlands) http://www.mediawiki.org/wiki/Amsterdam_Hackathon_2013 There are about 100 participants registered, and we have some room for more. Registration is free but you need to sign up. There is also some travel sponsorship budget left after a first round of approvals. If your free software contributions and your Wikimedia love is more valuable than the money you have in the bank, you can just register and apply for scholarship. Please include public URLs where we can see your open source licensed contributions (code, pixels, wise words...). A CV alone won't cut it, no matter how many avatars appear to endorse your skills. Hurry up! The organizers are reviewing applications as they come. -- Quim Gil Technical Contributor Coordinator @ Wikimedia Foundation http://www.mediawiki.org/wiki/User:Qgil

1 0

Motivation for working on a free software project
by Luis Miguel Sinusía 11 Apr '13

11 Apr '13

Hello, I'm a student of a master in free software in Spain. For performing a job, I ask for your cooperation by answering the following questions: 1. - In what ways began collaborating in an open source project? 2. - What is your motivation to participate in a free software project: social motivation, technological, economic, etc? 3. - In their collaborations, which is the project you found more motivated? 4. - What do you think is the main reason that generally has the other contributors? 5. - Do you think your participation in open source projects will help improve your future career? 6. - Do you think in the future continue to work on open source projects? or in Spanish: 1.- ¿De que manera comenzó a colaborar en un proyecto de software libre? 2.- ¿Cual es su motivacion para participar en un proyecto de software libre: motivacion social, tecnologica, economica, etc? 3.- Dentro de sus colaboraciones, ¿en que proyecto se ha encontrado más motivado? 4.- ¿Cual cree que es la principal motivación que en general tiene el resto de colaboradores? 5.- ¿Cree que su participación en proyectos de software libre le ayudara a mejorar su futuro profesional? 6.- ¿Piensa en un futuro seguir colaborando en proyectos de software libre? In advance, thank you very much.

2 1

SEO for Mediawiki
by Markus 09 Apr '13

09 Apr '13

Dear Specialists, is there a difference between search founds in: http://wiki.openstreetmap.org/wiki/<page-title> and http://wiki.openstreetmap.org/wiki/<page-title>/<sub-page-title> ? How much well be the improvement, if we change "sub-title-pages" to "title-pages"? or is this equal? (Google and Mediawiki-search) Best regards, Markus

1 0

Squid do not cache dynamic mediawiki content
by s9gf4ult 09 Apr '13

09 Apr '13

Hello, I am using Squid-3.1 in acceleration mode and trying to accelerate mediawiki-1.20.2. I am trying to get squd to cache mediawiki's pages. Here is my squid config acl manager proto cache_object acl localhost src 127.0.0.1/32 ::1 acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1 acl web_ports port 80 acl purge method PURGE http_access allow manager localhost http_access deny manager http_access allow web_ports all http_access allow purge localhost http_access deny purge http_access deny all http_port 10.50.79.19:80 accel defaultsite=ec2-54-228-113-248.eu-west-1.compute.amazonaws.com vhost ignore-cc cache_peer 127.0.0.1 parent 8080 0 no-query originserver round-robin name=wiki cache_dir aufs /var/spool/squid/cache 500 16 256 refresh_pattern -i ^http: 5 100% 1440 ignore-no-cache mediawiki is configured to use squid // Squid $wgUseSquid = true; $wgSquidServers = array('10.50.79.19'); $wgSquidServersNoPurge = array('127.0.0.1'); But I am getting on request to main page, which is dymaically generated by mediawiki, this response headers: Cache-Control |s-maxage=18000, must-revalidate, max-age=0| Connection |close| Content-Language |ru| Content-Type |text/html; charset=UTF-8| Date |Mon, 08 Apr 2013 11:24:07 GMT| Last-Modified |Mon, 08 Apr 2013 10:43:40 GMT| Server |Apache/2.2.24 (Amazon)| Vary |Accept-Encoding,Cookie| X-Cache |MISS from ip-10-50-79-19.eu-west-1.compute.internal| X-Cache-Lookup |MISS from ip-10-50-79-19.eu-west-1.compute.internal:80| X-Content-Type-Options |nosniff| X-Powered-By |PHP/5.3.20| via |1.0 ip-10-50-79-19.eu-west-1.compute.internal (squid/3.1.10)| so we see, that squid return result not from cache, but from the apache web server. We see coresponding records in Apache logs when cache misses. While request to static content, like picture files return this headers Accept-Ranges |bytes| Age |15438| Connection |keep-alive| Content-Length |10204| Content-Type |text/css| Date |Mon, 08 Apr 2013 07:06:50 GMT| Etag |"227ef-27dc-4d9846436bc62"| Last-Modified |Thu, 04 Apr 2013 08:02:27 GMT| Server |Apache/2.2.24 (Amazon)| X-Cache |HIT from ip-10-50-79-19.eu-west-1.compute.internal| X-Cache-Lookup |HIT from ip-10-50-79-19.eu-west-1.compute.internal:80| via |1.0 ip-10-50-79-19.eu-west-1.compute.internal (squid/3.1.10)| and here we see, that squid return content from the cache. What can be the cause of cache MISS on main page ? How to get squid to actually cache mediawiki's article pages ? Thanks.

2 3

MediaWiki 1.21rc2 -- More 1.21 testing
by Mark A. Hershberger 08 Apr '13

08 Apr '13

It is time again for a new MediaWiki release candidate. Since last week, patches to fix the following bugs were included in the tarball: Bug 46719: Remove link to Special:ActiveUsers from Special:Statistics Bug 46493: Handle invalid titles on ProtectedPages and ProtectedTitles Bug 46787: API: Fix rccontinue handling Bug 40617: Installer can now customize the logo in LocalSettings.php Newly reported, but not yet fixed, during testing of RC1: Bug 46943: Job queue items from 1.20 get lost – need exit strategy for upgrade Please download the release candidate and test it. If you find any bugs please report them on Bugzilla[1] and make sure I am added as a CC so that we can fix any show-stoppers before the final release. Don't forget to look over https://www.mediawiki.org/wiki/MediaWiki_1.21 and make any corrections or additions that are needed since I'll be using a (lightly edited) version of that to make the final announcement. Finally, I'll be preparing a third release candidate for next week. Quim Gil wants to do a testing week during that time. If you'd like to help me put together a testing plan for that week, let me know. [1] https://bugzilla.wikimedia.org/enter_bug.cgi?product=MediaWiki&cc=mah@every… Full release notes: https://www.mediawiki.org/wiki/Release_notes/1.21 ********************************************************************** Download: http://download.wikimedia.org/mediawiki/1.21/mediawiki-1.21.0rc2.tar.gz Patch to previous version (1.20.0), without interface text: http://download.wikimedia.org/mediawiki/1.21/mediawiki-1.21.0rc2.patch.gz Interface text changes: http://download.wikimedia.org/mediawiki/1.21/mediawiki-i18n-1.21.0rc2.patch… GPG signatures: http://download.wikimedia.org/mediawiki/1.21/mediawiki-1.21.0rc2.tar.gz.sig http://download.wikimedia.org/mediawiki/1.21/mediawiki-1.21.0rc2.patch.gz.s… http://download.wikimedia.org/mediawiki/1.21/mediawiki-i18n-1.21.0rc2.patch… Public keys: https://secure.wikimedia.org/keys.html

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l April 2013