MediaWiki-l November 2014

mediawiki-l@lists.wikimedia.org

57 participants
58 discussions

End of lifetime announcement for MediaWiki 1.22
by Markus Glaser 26 Nov '14

26 Nov '14

Hello everyone, with the release of MediaWiki 1.24, the lifetime of MediaWiki version 1.22 ends. There will be a final maintenance release on 17th of December, 2014. The new legacy version is 1.23. Users still using MediaWiki 1.22 are advised to upgrade to version 1.24.0 (latest stable) or 1.23.7 (legacy and LTS version). MediaWiki 1.19 LTS will continue to be supported until May, 2015. Best, Mark Hershberger and Markus Glaser (Wiki Release Team)

1 0

MediaWiki Security and Maintenance Releases: 1.23.7, 1.22.14 and 1.19.22
by Markus Glaser 26 Nov '14

26 Nov '14

Hello everyone, I would like to announce the release of MediaWiki 1.23.7, 1.22.14 and 1.19.22. This is a regular security and maintenance release. Download links are given at the end of this email. == Security fixes == * (bugs 66776, 71478) SECURITY: User PleaseStand reported a way to inject code into API clients that used format=php to process pages that underwent flash policy mangling. This was fixed along with improving how the mangling was done for format=json, and allowing sites to disable the mangling using $wgMangleFlashPolicy. <https://phabricator.wikimedia.org/T68776> <https://phabricator.wikimedia.org/T73478> * (bug 70901) SECURITY: User Jackmcbarn reported that the ability to update the content model for a page could allow an unprivileged attacker to edit another user's common.js under certain circumstances. The user right "editcontentmodel" was added, and is needed to change a revision's content model. <https://phabricator.wikimedia.org/T72901> * (bug 71111) SECURITY: User PleaseStand reported that on wikis that allow raw HTML, it is not safe to preview wikitext coming from an untrusted source such as a cross-site request. Thus add an edit token to the form, and when raw HTML is allowed, ensure the token is provided before showing the preview. This check is not performed on wikis that both allow raw HTML and anonymous editing, since there are easier ways to exploit that scenario. <https://phabricator.wikimedia.org/T73111> * (bug 72222) SECURITY: Do not show log action when the entry is revdeleted with DELETED_ACTION. NOTICE: this may be reverted in a future release pending a public RFC about the desired functionality. This issue was reported by user Bawolff. <https://phabricator.wikimedia.org/T74222> == Bugfixes == * (bug 71621) Make allowing site-wide styles on restricted special pages a config option. <https://phabricator.wikimedia.org/T73621> * (bug 42723) Added updated version history from 1.19.2 to 1.22.13 <https://phabricator.wikimedia.org/T44723> * $wgMangleFlashPolicy was added to make MediaWiki's mangling of anything that might be a flash policy directive configurable. Full release notes for 1.23.7: <https://www.mediawiki.org/wiki/Release_notes/1.23> Full release notes for 1.22.14: <https://www.mediawiki.org/wiki/Release_notes/1.22> Full release notes for 1.19.22: <https://www.mediawiki.org/wiki/Release_notes/1.19> Public keys: <https://www.mediawiki.org/keys/keys.html> ********************************************************************** 1.23.7 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.7.tar.gz https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.7.tar.gz Patch to previous version (1.23.6): https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.7.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.7.tar.gz.… https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.7.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.23/mediawiki-1.23.7.patch.gz.sig ********************************************************************** 1.22.14 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.14.tar.gz Patch to previous version (1.22.13): https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.14.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.22/mediawiki-core-1.22.14.tar.gz… https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.14.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.22/mediawiki-1.22.14.patch.gz.sig ********************************************************************** 1.19.22 ********************************************************************** Download: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.22.tar.gz Patch to previous version (1.19.21): https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.22.patch.gz GPG signatures: https://releases.wikimedia.org/mediawiki/1.19/mediawiki-core-1.19.22.tar.gz… https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.22.tar.gz.sig https://releases.wikimedia.org/mediawiki/1.19/mediawiki-1.19.22.patch.gz.sig Mark Hershberger and Markus Glaser (Wiki Release Team)

1 0

Second try: PHP Notice: Undefined index: editfont in includes/resourceloader/ResourceLoaderUserCSSPrefsModule.php
by Katharina Wolkwitz 26 Nov '14

26 Nov '14

Hi again, getting to me second server-update I'm encountering a new set of error-messages. :-) This time it's an undefined index: editfont in the file includes/resourceloader/ResourceLoaderUserCSSPrefsModule.php grepping for the word editfont through the whole mediawiki-installation-directory didn't really help. It seems that exept for the for lines inside of the file above (none of which defines editfont btw.) there's one possible candidate in includes/DefaultSettings.php: 'editfont' => 'default', but I'm not sure whether that should be the definition missing in ResourceLoaderUserCSSPrefsModule.php... I'm adding the grep-result (minus the entries in languages/i18n/) to this mail for anyone who's interested. I'd be grateful for any hints or tips as to how to solve the error-message. Kate

2 2

Skin tarballs now downloadable from mediawiki.org
by Legoktm 25 Nov '14

25 Nov '14

Hi! There is now a Special:SkinDistributor[1] on mediawiki.org that will allow you to download tarballs of skins that are hosted on gerrit. Since skins have moved out of the core repository and handled like extensions as of 1.24, it's now possible to provide an easier way to download them. In addition, I discovered that the tarball generator (for both extensions and skins) was including .git subdirectories in the tarballs it was creating, causing extremely large tarballs depending on the history. It no longer does that[2], shrinking tarballs by over 100MB in some cases! Thanks to Chad and Yuvi for helping with code review and the deployment! -- Legoktm [1] https://www.mediawiki.org/wiki/Special:SkinDistributor [2] https://gerrit.wikimedia.org/r/#/c/174777/

2 1

Tooltips
by Legault, Phillip [ITSUS] 25 Nov '14

25 Nov '14

I was looking at the information for the tooltips in MediaWiki The info part works However Note and warning does not work. Is there another way to get tooltips working in in MediaWiki without have to x out of them? Without icon as well Phil Legault Lead Analyst, Architecture Johnson & Johnson ITS (908) 655-4307

3 19

Landing Page after Account Creation
by chris tharp 24 Nov '14

24 Nov '14

Hi Once upon a time after account creation users were directed to: Mediawiki:Welcomecreation and then it was changed to Mediawiki:Welcomeuser (I think). But now (1.23.6) it seems to go to a different page all together with an option of either going back to the page they were at or going to their preferences. Does anyone know where that page is? Can it be customized like Welcomecreation? Thanks

1 1

wiki.digitalfestival.net
by Serena Cividini 24 Nov '14

24 Nov '14

Hi to everyone, i installed media wiki on http://wiki.digitalfestival.net. I managed to set up notifications via e-mail for messages modified but now i want, when someone replies via email go to directly edit the discussion There is this possibility? Thanks *SERENA CIVIDINI* *IT Customer Care* skype: serena-cividini *phid s.r.l.* Via B. Bono 11C - 24121 BERGAMO +39 035 233952 - www.phid.it ----------------------------------------------------------------- *phid**©* * - Phygital Identity*------------------------------ -----------------------------------

1 0

chameleon skin
by Legault, Phillip [ITSUS] 24 Nov '14

24 Nov '14

I'm using the chameleon skin and I see that in the drilldown choose category it is showing bullets for the ul#drilldown-categories. I do see that the css is there to remove them. Is there any way to fix this? Thank you for your help! Phil Legault

2 3

TOC
by Legault, Phillip [ITSUS] 24 Nov '14

24 Nov '14

When I click on a table of content link it goes past the heading I selected by 2 lines. Is there a way to fix this? Thank you for your help! Phil Legault

1 0

Can you override Less variables through MediaWiki:Vector.css?
by Adam Nielsen 22 Nov '14

22 Nov '14

Hi all, I'd like to change some colours in the Vector skin, but if I do this in CSS I will have to put hundreds of lines of code into MediaWiki:Vector.css. It looks like the colours I want to change are defined as Less variables, so if I could just override those then it would be only a handful of lines. I don't really want to clone the skin and modify the duplicate copy, because I will have to redo it on every upgrade to make sure I get the latest updates to the Vector skin. I tried putting the Less overrides in MediaWiki:Vector.css but it looks like this content gets included separately, so it can't override any Less variables. Is there any way to tweak the Less code via an article page in this manner, before it gets processed into CSS? Many thanks, Adam.

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l November 2014