Wikitech-l August 2015

wikitech-l@lists.wikimedia.org

104 participants
85 discussions

Difference in article count at gom wikipedia
by రహ్మానుద్దీన్ షేక్ 14 Aug '15

14 Aug '15

Hi, How different is this number {{NUMBEROFARTICLES}} from " Select count(*) from page where page_namespace=0 and page_is_redirect=0;" While {{NUMBEROFARTICLES}} gives a count of 558 on gom.wikipedia.org, while the sql query <http://quarry.wmflabs.org/query/4738> says its 2253 as of now. (14 August 12:47 pm IST). Why there is such difference (huge one)? Is this a bug? Should this be dealt at phabricator? Please help. -- With thanks & regards *Rahimanuddin Shaik* నాని [image: http://upload.wikimedia.org/wikipedia/meta/0/08/Wikipedia-logo-v2_1x.png] reachout ఒక విశ్వాన్ని ఊహించండి, ఎక్కడయితే ప్రతి మనిషి ఒక సంపూర్ణ విజ్ఞానభాండారాన్ని అందరితో పంచుకోగలడో, ఆ విశ్వాన్ని ఊహించండి. *అటువంటి విశ్వాన్ని నెలకొల్పడమే మా సంకల్పం.* తెలుగు వికీపీడియా : http://te.wikipedia.org CIS-A2K Program : http://meta.wikimedia.org/wiki/India_Access_To_Knowledge CIS-INDIA : http://cis-india.org A new address for ebooks : http://kinige.com *తెలుగువారికి సాంకేతిక సహాయం - http://techsetu.com <http://techsetu.com/>*

2 1

2015 Aug 12 Scrum of Scrums meeting notes
by Grace Gellerman 13 Aug '15

13 Aug '15

https://www.mediawiki.org/wiki/Scrum_of_scrums/2015-08-12

1 0

Content WG: Templating, Page Components & editing
by Gabriel Wicke 13 Aug '15

13 Aug '15

TL;DR: Join us to discuss Templates, Page Components & editing on Thu, 13 August, 12:45 – 14:00 PDT [0]. Hello all, Recent discussions, including the pre-Wikimania content brainstorming [2][3], brought up several important questions about the next steps for MediaWiki's and particularly Wikimedia's content representation, storage, change propagation, and caching. Many of those questions directly affect ongoing work, so it would be good to get more clarity on them soon. To this end, I am proposing we meet every two weeks & discuss one major area at a time. I think we have enough topics for four meetings over two months [2][3], after which we can re-evaluate the approach. As the first topic, I would like to propose *Templates, Page Components & editing*. Gradual improvements in this area should let us broaden the support for different devices, improve the editing experience, and speed up rendering and updates. There has been a lot of discussion and activity on this recently, including a talk by C.Scott at Wikimania [4], Jon's Wikidata-driven infoboxes on the mobile site [5], Marius's Lua-based infobox programming idea [6], and Wikia's declarative infobox components [7]. This summary task [8] has a list of related resources. Concretely, we could try to answer these questions: - Can we find satisfactory general abstractions for page components (well-formed content blocks)? - What are the requirements for editing, RL module / metadata aggregation, dependency tracking? - Should we evolve wikitext templates into well-formed page components? Please join us at: *Thu, 13 August, 12:45 – 14:00 PDT* [0] - by joining the BlueJeans conference call [1], - on IRC, in #wikimedia-meeting, or - in Room 37 in the WMF office. See you there, Gabriel [0]: http://www.timeanddate.com/worldclock/fixedtime.html?iso=20150813T1945 [1]: https://bluejeans.com/2061103652, via phone +14087407256, meeting id 2061103652 [2]: https://phabricator.wikimedia.org/T99088 [3]: https://etherpad.wikimedia.org/p/Content_platform [4]: https://upload.wikimedia.org/wikipedia/commons/0/08/Templates_are_dead!_Lon… [5]: https://en.m.wikipedia.org/wiki/Albert_Einstein?mobileaction=alpha [6]: https://www.mediawiki.org/wiki/Extension:Capiunto [7]: http://community.wikia.com/wiki/Thread:841717, http://infoboxpreview.appspot.com/ [8]: https://phabricator.wikimedia.org/T105845

5 5

extension updates for 1.23.x?
by Jim Tittsler 13 Aug '15

13 Aug '15

What is the recommended path for updating extensions if you are still using the 1.23.x series? After the update announcement today, I tried downloading the 1.23 version of each of the extensions that we use from the Extension Distributor. Each of the downloads appears to be the same as the old version, suggesting none of the fixes has been backported (or are not required?). Is there a correct way to keep extensions updated if you stay with the "long term support release"? -- Jim Tittsler http://www.OnJapan.net/ GPG: 0x01159DB6 Python Starship http://Starship.Python.net/crew/jwt/ Mailman IRC irc://irc.freenode.net/#mailman

3 2

[recommended reading] the hamburger menu is broken
by Brian Gerstle 11 Aug '15

11 Aug '15

Interesting article about how various sites/apps switched away from the hamburger and to the more conventional tab bar, with tangible results: http://deep.design/the-hamburger-menu/ -- EN Wikipedia user page: https://en.wikipedia.org/wiki/User:Brian.gerstle IRC: bgerstle

2 1

[MediaWiki-announce] MediaWiki Security and Maintenance Releases: 1.25.2, 1.24.3, 1.23.10
by Chad 11 Aug '15

11 Aug '15

I would like to announce the release of MediaWiki 1.25.2, 1.24.3, and 1.23.10. These releases fix three security issues in core, in addition to other bug fixes. Several extensions have also had security issues fixed. Download links are given at the end of this email == Security fixes == * Internal review discovered that Special:DeletedContributions did not properly protect the IP of autoblocked users. This fix makes the functionality of Special:DeletedContributions consistent with Special:Contributions and Special:BlockList. <https://phabricator.wikimedia.org/T106893> * Internal review discovered that watchlist anti-csrf tokens were not being compared in constant time, which could allow various timing attacks. This could allow an attacker to modify a user's watchlist via csrf. <https://phabricator.wikimedia.org/T94116> * John Menerick reported that MediaWiki's thumb.php failed to sanitize various error messages, resulting in xss. <https://phabricator.wikimedia.org/T97391> Additionally, the following extensions have been updated to fix security issues: * Extension:SemanticForms - MediaWiki user Grunny discovered multiple reflected xss vectors in SemanticForms. Further internal review discovered and fixed other reflected and stored xss vectors. <https://phabricator.wikimedia.org/T103391> <https://phabricator.wikimedia.org/T103765> <https://phabricator.wikimedia.org/T103761> * Extension:SyntaxHighlight_GeSHi - xss and potential DoS vectors. Internal review discovered that the contib directory for GeSHi was re-included in MediaWiki 1.25. Some scripts could be potentially be used for DoS, and DAU Huy Ngoc discovered an xss vector. All contrib scripts have been removed. <https://phabricator.wikimedia.org/T108198> * Extension:TimedMediaHandler - User:McZusatz reported that resetting transcodes deleted the transcode without creating a new one, which could be used for vandalism or potentially DoS. <https://phabricator.wikimedia.org/T100211> * Extension:Quiz - Internal review discovered that Quiz did not properly escape regex metacharacters in a user controlled regular expression, enabling a DoS vector. <https://phabricator.wikimedia.org/T97083> * Extension:Widgets - MediaWiki developer Majr reported a potential HTML injection (xss) vector. <https://phabricator.wikimedia.org/T88964> == Bug Fixes in 1.25.2 == * (T102562) Fix InstantCommons parameters to handle the new HTTPS-only policy of Wikimedia Commons. * (T100767) Setting a configuration setting for skin or extension to false in LocalSettings.php was not working. * (T100635) API action=opensearch json output no longer breaks when $wgDebugToolbar is enabled. * (T102522) Using an extension.json or skin.json file which has a "manifest_version" property for 1.26 compatability will no longer trigger warnings. * (T86156) Running updateSearchIndex.php will not throw an error as page_restrictions has been added to the locked table list. * Special:Version would throw notices if using SVN due to an incorrectly named variable. Add an additional check that an index is defined. == Bug Fixes in 1.24.3 == * Update jQuery from v1.11.2 to v1.11.3. * (T102562) Fix InstantCommons parameters to handle the new HTTPS-only policy of Wikimedia Commons. == Bug Fixes in 1.23.10 == * (bug 67644) Make AutoLoaderTest handle namespaces * (T91653) Minimal PSR-3 debug logger to support backports from 1.25+. * (T102562) Fix InstantCommons parameters to handle the new HTTPS-only policy of Wikimedia Commons. Full release notes for 1.25.2: <https://www.mediawiki.org/wiki/Release_notes/1.25> Full release notes for 1.24.3: <https://www.mediawiki.org/wiki/Release_notes/1.24> Full release notes for 1.23.10: <https://www.mediawiki.org/wiki/Release_notes/1.23> For information about how to upgrade, see <https://www.mediawiki.org/wiki/Manual:Upgrading> ********************************************************************** Mediawiki downloads and patches ********************************************************************** Full release notes: https://www.mediawiki.org/wiki/Release_notes/1.25 https://www.mediawiki.org/wiki/Release_notes/1.24 https://www.mediawiki.org/wiki/Release_notes/1.23 Download: http://download.wikimedia.org/mediawiki/1.25/mediawiki-1.25.2.tar.gz http://download.wikimedia.org/mediawiki/1.24/mediawiki-1.24.3.tar.gz http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.10.tar.gz Download (no bundled extensions): http://download.wikimedia.org/mediawiki/1.25/mediawiki-core-1.25.2.patch.gz http://download.wikimedia.org/mediawiki/1.24/mediawiki-core-1.24.3.patch.gz http://download.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.10.patch.gz Patch to previous version: http://download.wikimedia.org/mediawiki/1.25/mediawiki-1.25.2.patch.gz http://download.wikimedia.org/mediawiki/1.24/mediawiki-1.24.3.patch.gz http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.10.patch.gz Localization patch to previous version: http://download.wikimedia.org/mediawiki/1.25/mediawiki-i18n-1.25.2.patch.gz http://download.wikimedia.org/mediawiki/1.24/mediawiki-i18n-1.24.3.patch.gz http://download.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.10.patch.gz GPG signatures: http://download.wikimedia.org/mediawiki/1.25/mediawiki-1.25.2.tar.gz.sig http://download.wikimedia.org/mediawiki/1.24/mediawiki-1.24.3.tar.gz.sig http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.10.tar.gz.sig http://download.wikimedia.org/mediawiki/1.25/mediawiki-core-1.25.2.patch.gz… http://download.wikimedia.org/mediawiki/1.24/mediawiki-core-1.24.3.patch.gz… http://download.wikimedia.org/mediawiki/1.23/mediawiki-core-1.23.10.patch.g… http://download.wikimedia.org/mediawiki/1.25/mediawiki-1.25.2.patch.gz.sig http://download.wikimedia.org/mediawiki/1.24/mediawiki-1.24.3.patch.gz.sig http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.10.patch.gz.sig http://download.wikimedia.org/mediawiki/1.25/mediawiki-i18n-1.25.2.patch.gz… http://download.wikimedia.org/mediawiki/1.24/mediawiki-i18n-1.24.3.patch.gz… http://download.wikimedia.org/mediawiki/1.23/mediawiki-i18n-1.23.10.patch.g… Public keys: https://www.mediawiki.org/keys/keys.html ********************************************************************** Extension:Semantic Forms ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:Semantic_Forms ********************************************************************** Extension:SyntaxHighlight_GeSHi ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:SyntaxHighlight_GeSHi ********************************************************************** Extension:TimedMediaHandler ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:TimedMediaHandler ********************************************************************** Extension:Quiz ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:Quiz ********************************************************************** Extension:Widgets ********************************************************************** Information and Download: https://www.mediawiki.org/wiki/Extension:Widgets -Chad _______________________________________________ MediaWiki announcements mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce

2 2

Bikeshedding a good name for "the api.php API"
by Brad Jorsch (Anomie) 11 Aug '15

11 Aug '15

When api.php was basically the only API in MediaWiki, calling it "the API" worked well. But now we've got a Parsoid API, Gabriel's work on a REST content API, Gabriel's work on an internal storage API, and more on the way. So just saying "the API" is getting confusing. So let's bikeshed a reasonably short name for it that isn't something awful like "the api.php API". I'm horrible at naming. -- Brad Jorsch (Anomie) Software Engineer Wikimedia Foundation

30 38

Re: [Wikitech-l] [Engineering] Code of conduct
by Matthew Flaschen 11 Aug '15

11 Aug '15

On 08/07/2015 11:43 AM, Oliver Keyes wrote: > Thank you for drafting this up, Matt. Who's "we" here? In that case, "we" meant the Wikimedia technical community (in collaboration with other related groups at WMF). Several people have already participated, but we need more. See e.g. https://phabricator.wikimedia.org/T90908 Thanks, Matt Flaschen

8 8

Follow-up on Community Liaisons' roundtable at Wikimania 2015
by Rachel diCerbo 10 Aug '15

10 Aug '15

Greetings, and apologies for cross posting: The community liaisons at the Wikimedia Foundation held a roundtable discussion at Wikimania [1] in order to gather feedback around participation in product development. The notes are now up.[2] We welcome input from everyone, whether you were unable to join us at Wikimania, or whether you did attend and want to further engage in conversation. Some major themes from this session were that places to give feedback are confusing and unclear, there is little to no understanding of product/engineering prioritization, and there were requests to involve and include communities more. The goal of this roundtable was not to get a wishlist of products and features, but to identify problems and successes around product development so that the WMF and communities can collaborate in better ways. This is an ongoing conversation, and we invite your participation here [3]. Thank you so much, Rachel [1] https://wikimania2015.wikimedia.org/wiki/Submissions/Do_you_feel_heard%3F_A… [2] https://meta.wikimedia.org/wiki/Community_Engagement_(Product)/Wikimania_20… [3] https://meta.wikimedia.org/wiki/Talk:Community_Engagement_%28Product%29/Wik… -- Rachel diCerbo Director of Community Engagement (Product) Wikimedia Foundation Rdicerb (WMF) <https://meta.wikimedia.org/wiki/User_talk:Rdicerb_%28WMF%29> @a_rachel <https://twitter.com/a_rachel>

1 0

[BREAKING CHANGE] Use of "document.write" no longer supported
by Krinkle 09 Aug '15

09 Aug '15

TL:DR; Double-check your wiki's site scripts and your personal scripts to ensure "document.write" is no longer used. Hey all, We have strongly discouraged for many years the use of synchronous "document.write()" to inject additional HTML into the output stream. Across MediaWiki core, extensions, and gadgets this hasn't worked since 2012. With two legacy exceptions: the 'site' and 'user' modules. We always found a way to continue support for those. But this is now going to be removed. In upcoming ResourceLoader upgrades and performance improvements, we will cease support for synchronous document-write, in the site and user modules. Use of document-write requires MediaWiki to instruct the browser to pause its rendering before the browser may proceed to parse and display a page to users. Even though most scripts don't use this feature, the mere fact that we support it is causing a measurable impact on page load performance. Starting in 1.26wmf17 (released to wikis this week), ResourceLoader will be fully asynchronous. This change is already live on the Beta Cluster. [1] This means it is no longer possible for the site and user scripts to, with document-write, pause the browser execution and insert additional HTML in the initial output stream. Removing an API does not necessarily mean removing a capability. If you encounter any issues or can't find a simple upgrade path for an existing script, please reach out on the mailing list. Below is summary of a few typical use cases: 1. Loading scripts. Instead of `document.write("<script src=url></script>");` use `mw.loader.load(url);` instead. 2. Loading stylesheets. Instead of `document.write("<link rel=stylesheet href=url/>");` use `mw.loader.load(url, "text/css");` instead. 3. Creating elements. Instead of `document.write("<div>....</div>");`, use: var nodes = $.parseHTML("<div>..</div>"); $('body').append(nodes); Or something like: $("<div>").attr({ "id": "foo" }).appendTo("body"); Please take some time to look through your wiki's site scripts (MediaWiki:Common.js, MediaWiki:Vector.js, etc.) and make sure document-write is no longer used. You can also use the search engine. For example: https://nl.wikipedia.org/w/index.php?search=document.write&ns8=1 https://commons.wikimedia.org/w/index.php?search=document.write&ns8=1 Search results from mwgrep on all public wikis: https://phabricator.wikimedia.org/P1832 Check out the migration page for other deprecations and common issues you may encounter: https://www.mediawiki.org/wiki/ResourceLoader/Migration_guide_(users) == Further reading == The ResourceLoader improvements that led to this change are tracked under https://phabricator.wikimedia.org/T107399. Refer to the following workboards for other tasks in this area: https://phabricator.wikimedia.org/tag/mediawiki-resourceloader/board/?order… https://phabricator.wikimedia.org/tag/performance-team/board/?order=priority Now that the site and user modules are primary citizens in the ResourceLoader landscape, their states can be tracked with mw.loader. This solves long-outstanding issues such as https://phabricator.wikimedia.org/T106736 which sometimes caused malfunctions in Common.js to affect user gadgets, VisualEditor, and other site tools. — Krinkle [1] http://en.wikipedia.beta.wmflabs.org/

6 7

← Newer
1
2
3
4
5
6
7
8
9
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l August 2015