Wikitech-l January 2022

wikitech-l@lists.wikimedia.org

55 participants
51 discussions

How to get started with contribution
by Huda Saleem 15 Jan '22

15 Jan '22

Respected sir/madam, I am Huda Saleem, a computer science undergrad, at Barani Institute of Sciences Sahiwal. I am new to open source contributions. But I am well aware of Frontend and Backend Technologies like HTML, CSS, JavaScript and PHP. Also, I am a python developer too. I would love to contribute to your organization but could you please tell me how to get started? Hoping to hear from you soon. Kind Regards Huda Saleem

2 2

[Train] 🚂🔥1.38.0-wmf.17 blocked
by Dan Duvall 14 Jan '22

14 Jan '22

The 1.38.0-wmf.17 version of MediaWiki is being held at group0[0] due to a large spike in parser errors on commons and group1 wikipedias upon deployment. The new version is deployed to group0[1], but can proceed no further until these issues are resolved: * T299149 - MWException: Parser state cleared while parsing. Did you call Parser::parse recursively? Once these issues are resolved, the train can move forward. Thank you for your help! -- Your humble train toiler [0]. <https://phabricator.wikimedia.org/T299149> [1]. <https://versions.toolforge.org/> -- Dan Duvall Staff Software Engineer, Release Engineering Wikimedia Foundation

1 1

Wikitext, Document Models, and HTML5 Output
by Adam Sobieski 14 Jan '22

14 Jan '22

Wikitech-l, Hello. I have a question about the HTML output of wiki parsers. I wonder about how simple or complex that it would be for a wiki parser to output, instead of a flat document structure inside of a <div> element, an <article> element containing nested <section> elements? Recently, in the Community Wishlist Survey Sandbox<https://meta.wikimedia.org/wiki/Community_Wishlist_Survey/Sandbox>, the speech synthesis of Wikipedia articles<https://meta.wikimedia.org/wiki/Community_Wishlist_Survey/Sandbox#Spoken_ar…> was broached. The proposer of these ideas indicated that, for best results, some content, e.g., “See also” sections, should not be synthesized. In response to these interesting ideas, I mentioned some ideas from EPUB, referencing pronunciation lexicons from HTML<https://www.w3.org/publishing/epub3/epub-contentdocs.html#sec-pls> and SSML attributes in HTML<https://www.w3.org/publishing/epub3/epub-contentdocs.html#sec-xhtml-ssml-at…>, the CSS Speech Module<https://www.w3.org/TR/css-speech-1/>, and that output HTML content could be styled using the CSS Speech Module’s speak property. In these regards, I started thinking about how one might extend wikitext syntax to be able to style sections, e.g.,: == See also == {style="speak:never"} Next, I inspected the HTML of some Wikipedia articles and realized that, due to the structure of the output HTML documents, it isn’t simple to style or to add attributes to sections. There are only <h2>, <h3>, <h4> (et cetera) elements inside of a containing <div> element; sections are not yet structured elements. The gist is that, instead of outputting HTML like: <div class="mw-parser-output"> <h2><span class="mw-headline" id="Heading">Heading</span></h2> <p>Paragraph 1</p> <p>Paragraph 2</p> <h3><span class="mw-headline" id="Subheading">Subheading</span></h3> <p>Paragraph 3</p> <p>Paragraph 4</p> </div> could a wiki parser output HTML5 like: <article class="mw-parser-output"> <section id="Heading"> <header><h2><span class="mw-headline">Heading</span></h2></header> <p>Paragraph 1</p> <p>Paragraph 2</p> <section id="Subheading"> <header><h3><span class="mw-headline">Subheading</span></h3></header> <p>Paragraph 3</p> <p>Paragraph 4</p> </section> </section> </article> Initial thoughts regarding the latter HTML5 include that it is better structured, more semantic, more styleable, and potentially more accessible. If there is any interest, I could write up some lengthier discussion about one versus the other, why one might be better – and more useful – than the other. Is this the correct mailing list to discuss any of these wiki technology, wiki parsing, wikitext, document model, and HTML5 output topics? Best regards, Adam

3 4

Coolest Tool Award 2021: Tomorrow, 17:00 UTC!
by Andre Klapper 13 Jan '22

13 Jan '22

Hi everyone! A reminder that the Coolest Tool Award event https://meta.wikimedia.org/wiki/Coolest_Tool_Award will happen online tomorrow, Friday 14 January at 17:00 UTC. See https://zonestamp.toolforge.org/1642179615 for your timezone. Here is more information about the venues: * The event will be live streamed on Youtube in the MediaWiki channel: https://www.youtube.com/watch?v=cdnwhDAdrxE * The following venues can be used for socializing: - Youtube live stream chat: https://www.youtube.com/user/watchmediawiki - Twitter #CoolestToolAward : https://twitter.com/search?q=%23CoolestToolAward&f=live - #wmhack Telegram group : https://t.me/wmhack - #wikimedia-hackathon on Libera IRC We hope to see you there! andre, for the Coolest Tool Academy 2021 -- Andre Klapper (he/him) | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/

1 0

Regarding Problem in Setting-up development environment .
by Ameygupta 12 Jan '22

12 Jan '22

3 2

Minerva Neue skin will be bundled with MediaWiki 1.38
by Jon Robson 12 Jan '22

12 Jan '22

If you are not an extension developer, you can safely ignore this message. I am excited to announce that the Minerva Neue skin will be bundled with MediaWiki in 1.38 per https://phabricator.wikimedia.org/T191743 The Minerva Neue skin powers the mobile site of Wikimedia projects, so it makes sense to include this skin for 3rd party MediaWiki instances that want a responsive but simplified experience. The implication of this is that extension developers should be making sure their code compatible with MinervaNeue. Note, that Minerva Neue operates in two modes (a desktop or mobile mode) depending on whether MobileFrontend is installed, however, MobileFrontend is still not part of the MediaWiki bundle so this mode doesn't need to be tested at this point. You can tell if you are in Minerva desktop mode by testing in an incognito window and verifying that you see a more (ellipsis) dropdown in the toolbar. e.g. Test on https://en.wikipedia.org/wiki/Minerva?useskin=minerva NOT https://en.m.wikipedia.org/wiki/Minerva?useskin=minerva if you have any questions or concerns please feel free to reply to this e-mail or the Phabricator ticket. Thanks for reading! Jon

2 2

Summary of 1.38.0-wmf.16 train deployment
by Mukunda Modell 11 Jan '22

11 Jan '22

🚂🌈Summary of 1.38.0-wmf.16 train deployment This email is a summary of the Wikimedia production deployment of 1.38.0-wmf.16 *wmf.16* is in production across all wikis and I'll be handing the conductor hat to Dan for *wmf.17* which starts rolling today. - Conductor: Mukunda Modell - Backup Conductor: Antoine "hashar" Musso - Blocker Task: T293957 <https://phabricator.wikimedia.org/T293957> - Current Status <https://versions.toolforge.org> 📈 Stats Stats for this train compared to the last 5 trains. - 483 patches ▁▃▂▂█ - 0 Rollbacks █▆▃▆▁ - 1 Days of delay ▆█▁▂▂ - 4 Blockers ▁█▇▅▄ 🎉 Traintastic Folks 🎉 Thanks to folks who reported or resolved blockers: - Samuel - Urbanecm - James D. Forrester - Timo Tijhof - Ed Sanders

1 0

Upcoming Search Platform Office Hours—January 12th, 2022
by Trey Jones 11 Jan '22

11 Jan '22

The Search Platform Team <https://www.mediawiki.org/wiki/Wikimedia_Search_Platform> usually holds office hours the first Wednesday of each month—though we're going to have them a week later this month. Come talk to us about anything related to Wikimedia search, Wikidata Query Service, Wikimedia Commons Query Service, etc.! Feel free to add your items to the Etherpad Agenda for the next meeting. Details for our next meeting: Date: Wednesday, January 12th, 2022 Time: 16:00-17:00 GMT / 08:00-09:00 PST / 11:00-12:00 EST / 17:00-18:00 CET & WAT Etherpad: https://etherpad.wikimedia.org/p/Search_Platform_Office_Hours Google Meet link: https://meet.google.com/vgj-bbeb-uyi Join by phone: https://tel.meet/vgj-bbeb-uyi?pin=8118110806927 Hope to talk to you in a week! —Trey Trey Jones Staff Computational Linguist, Search Platform Wikimedia Foundation UTC–5 / EST

1 1

Want to contribute in your organization
by Ayush 11 Jan '22

11 Jan '22

2 1

MediaWiki Extensions and Skins Security Release Supplement (1.35.5/1.36.3/1.37.1)
by Maryum Styles 11 Jan '22

11 Jan '22

Greetings- With the security/maintenance release of MediaWiki 1.35.5/1.36.3/1.37.1 [0], we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: == Dynamic Page List 3/ DPL3 == + (T292351, CVE-2021-41118) - ReDOS in DPL3 https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHS… == CheckUser == + (T292795, CVE-2021-46150) - XSS Vulnerability in Special:CheckUserLog https://gerrit.wikimedia.org/r/q/If7cd112e627f47f9aca69b380dde1634bf55f789 == WikibaseMediaInfo == + (T293556, CVE-2021-46146) - Stored XSS via WikibaseMediaInfo caption fields https://gerrit.wikimedia.org/r/q/I58d37fb59f998f5bec4a018bf9da96a777f8ff78 == UniversalLanguageSelector == + (T293749, CVE-2021-46149) - /w/api.php?action=languagesearch denial of service https://gerrit.wikimedia.org/r/q/Ide32704cca578b9aecbce34bdcc0ac25c2a09a4d == SecurePoll == + (T290808, CVE-2021-46148) - Users with no NDA can access confidential information https://gerrit.wikimedia.org/r/q/Ic7510be487a1bf9215de9ae6cf4a26fad96384c9 == Wikibase == + (T294693, CVE-2021-45473) - XSS on page information Wikibase central description https://gerrit.wikimedia.org/r/q/I3cd080a1a7dacd7396d37ee0c98cff0b4e241f8d == FileImporter == + (T296605, CVE-2021-45474) - XSS in Special:ImportFile URL https://gerrit.wikimedia.org/r/q/Id1c8910aeac5b452fbabeddab70360765518223e == EntitySchema == + (T296578, CVE-2021-45471) - Globally blocked IPs can edit EntitySchema items https://gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9, https://gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c == Wikibase == + (T297570, CVE-2021-45472) - XSS in Wikibase using formatter URL https://gerrit.wikimedia.org/r/q/I37ece1dfdc80d38055067c9c4fa73ba591acd8bd The Wikimedia Security Team recommends updating these extensions and/or skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator [3]. Note: The SecurePoll Extension had other enhancements that were related to the security bug [4] but did not address the security concerns directly. See Phabricator [5] for more information. [0] https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikime… [1] https://phabricator.wikimedia.org/T292236 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs [4] https://phabricator.wikimedia.org/T290808 [5] https://phabricator.wikimedia.org/T277353

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l January 2022