MediaWiki-l March 2018

mediawiki-l@lists.wikimedia.org

45 participants
37 discussions

Aggregate MediaWiki pingback data available
by Cindy Cicalese 13 Mar '18

13 Mar '18

MediaWiki 1.28 introduced an optional pingback feature [0][1]. This feature is disabled by default. The pingback feature allows MediaWiki anonymously to report back information about its installation to help developers: the MediaWiki version, database type, PHP version, operating system, system type (32-bit or 64-bit), machine hardware, web server software, and memory limit. Aggregate pingback data collected since March 2017 is now viewable at https://pingback.wmflabs.org in graphical and tabular form. While this data only includes sites that opted in to data collection, it shows over 40,000 unique installations of MediaWiki in the last year in a variety of different configurations. Enjoy exploring the aggregate data! [0] https://www.mediawiki.org/wiki/Manual:$wgPingback [1] https://wikimediafoundation.org/wiki/MediaWiki_Pingback_Privacy_Statement ______________________________ Cindy Cicalese Product Manager, MediaWiki Platform Wikimedia Foundation

4 7

Security Release: CentralNotice extension
by Elliott Eggleston 12 Mar '18

12 Mar '18

Updates are available for the CentralNotice extension to fix an XSS vulnerability [1] and improve escaping in the extension's administration UI and in database queries [2]. The XSS vulnerability is exploitable by unauthenticated users, and only requires an attacker to convince their target to click on a specially crafted link to execute JavaScript in the context of a wiki running CentralNotice. Affected versions include git master after 2016-10-26 or release branches REL1_29 and REL1_30. The weaknesses in escaping would only be exploitable by users with CentralNotice administrator rights. If you are running CentralNotice, please update to the latest code from git [1] or download updated snapshots for release versions 1.27, 1.29, 1.30, or git master from [2]. Many thanks to Brian Wolff for finding the XSS vulnerability and writing the fixes, and to Andrew Green for finding the weak escaping and organizing the patches. [1] https://phabricator.wikimedia.org/T175900 [2] https://phabricator.wikimedia.org/T171987 [3] https://gerrit.wikimedia.org/r/mediawiki/extensions/CentralNotice [4] https://www.mediawiki.org/wiki/Special:ExtensionDistributor/ CentralNotice

1 0

File Upload Page - I need to write a custom version of it
by Emanuele D'Arrigo 12 Mar '18

12 Mar '18

Greetings everybody, I am the administrator of a private mediawiki installation for my neighborhood - about 170 inhabitants. Apparently one of the limits to adoption of the wiki is the cumbersome file upload process. I have installed Upload Wizard and customized the licensing options available to have the bare minimum but the multi-step process is still criticized. Just being forced by the UI to add a description to each file is apparently is too much. I therefore have to write our very own, supersimplified upload page. I'll obviously have to learn how to write Extensions and then I'll be able to have a look at the code of the Upload Wizard for inspiration. Are there any additional source of information on this topic that you'd recommend? Kind regards, Manu

4 4

Installing the MediaWiki Math extension is easier now
by Physikerwelt 06 Mar '18

06 Mar '18

In the past, administrators of MediaWiki installations faced a challenging installation procedure when they tried to enable rendering of mathematical formulae. As of February 22, no configuration or custom installation is required with the latest versions of MediaWiki core and the Math extension, if your wiki is connected to the internet. This is how it’s done: For wikis connected to the internet: Simply download the latest versions for both of Mediawiki core [1] and the Math extension [2] and that's it. The latest version can be obtained by selecting “master” in the extension distributor. For wikis not connected to the internet: Download the latest version of Mediawiki core [1] and the Math extension [2]. Install the node module mathoid [4]. We recommend using Node version 8 LTS [5], if node.js is not installed on the server. Mathoid can be installed to any location of your server that is accessible to the web server. For instance, in the location of the Math extension. After having installed and tested (e.g., by running npm test) the mathoid installation, point your MediaWiki to this location by adding the following config to your LocalSettings.php file: $wgMathoidCli = ['/srv/mathoid/cli.js', '-c', '/srv/mathoid/config.dev.yaml']; Replace /srv/mathoid with the location of your mathoid installation and run update.php [6]. If you have any issues with the installation, please file a phabricator ticket using the following link https://phabricator.wikimedia.org/maniphest/task/create/?projects=MediaWiki… Links and further reading: [1] https://www.mediawiki.org/wiki/Download_from_Git [2] Documentation of the Math extension https://www.mediawiki.org/wiki/Extension:Math** [3] Extension distributor https://www.mediawiki.org/wiki/Special:ExtensionDistributor/Math [4] Mathoid node package https://www.npmjs.com/package/mathoid [5] Node homepage https://nodejs.org/en/ [6] How to run the database update https://www.mediawiki.org/wiki/Manual:Update.php Scientific Paper: Moritz Schubotz, Gabriel Wicke: Mathoid: Robust, Scalable, Fast and Accessible Math Rendering for Wikipedia. CICM 2014: 224-235 https://arxiv.org/pdf/1404.6179.pdf Required versions: * For offline Math rendering MediaWiki core must include patch https://gerrit.wikimedia.org/r/#/c/399768/ ** The math extension must include patch https://gerrit.wikimedia.org/r/#/c/372100/ -- Moritz Schubotz Researcher isg.uni-konstanz.de/people/moritz-schubotz +49 1578 047 1397

3 2

"Between the Brackets" episode 3: Mike Cariaso
by Yaron Koren 06 Mar '18

06 Mar '18

Hi everyone, The 3rd episode of the "Between the Brackets" podcast has been released, featuring an interview with Mike Cariaso, the co-founder of SNPedia, a MediaWiki-based repository of genetics information that in turn powers the personal genetic analysis tool Promethease, which he also created. This episode is more about science and less about MediaWiki than previous episodes, but the science is pretty interesting (the growing field of personal genomics), and there is some discussion of MediaWiki and its extensions. You can hear the episode here: http://betweenthebrackets.libsyn.com/episode-3-mike-cariaso -Yaron

1 0

Assistance needed
by Huji Lee 04 Mar '18

04 Mar '18

Hi all, I am trying to test a package called UAParser, which is on Packagist already. I created this patch[1] to demonstrate it. After making the change shown in the patch, I ran composer update and verified that UAParser is in the /vendor directory. However, when I open Special:HelloWorld on wiki, I get the following error message: Class 'UAParser\Parser' not found I am not super informed about composer and Packagist, and don't know how to fix this issue. Any advice would be highly appreciated. Thanks, Huji [1] https://gerrit.wikimedia.org/r/#/c/409701/

3 6

Mermaid 1.0.0 released
by [[kgh]] 28 Feb '18

28 Feb '18

Hello everyone, I am happy to announce the initial release 1.0.0 of the Mermaid extension [0] created by James Hong Kong. It requires MediaWiki 1.27 and later as well as PHP 5.6 and later. It provides the #mermaid parser function to support the generation of diagrams and flowcharts with the help of the mermaid script language, e.g. flowcharts, sequence diagrams and gantt diagrams. See the README [1] to learn what this extension is all about. Cheers Karsten [0] https://bit.ly/mermaid-100 [1] https://bit.ly/mermaid-readme

4 11

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l March 2018