Hello,
recently I saw this edit of a template page on MediaWiki https://www.mediawiki.org/w/index.php?title=Template:RSSPost&oldid=97920... by an anon.
Do we really have the template Namespace on MediaWiki open for edits by anons?
In my view, this should be changed.
On Thu, Apr 24, 2014 at 10:01 AM, Thomas Gries mail@tgries.de wrote:
Do we really have the template Namespace on MediaWiki open for edits by anons?
Yes. https://www.mediawiki.org/wiki/Special:ListGroupRights
In my view, this should be changed.
Why? Do you know any WMF project where the whole Template namespace is semiprotected?
-- [[cs:User:Mormegil | Petr Kadlec]]
On Thu, Apr 24, 2014 at 10:13 AM, Petr Kadlec petr.kadlec@gmail.com wrote:
On Thu, Apr 24, 2014 at 10:01 AM, Thomas Gries mail@tgries.de wrote:
Do we really have the template Namespace on MediaWiki open for edits by anons?
Yes. https://www.mediawiki.org/wiki/Special:ListGroupRights
In my view, this should be changed.
Why? Do you know any WMF project where the whole Template namespace is semiprotected?
-- [[cs:User:Mormegil | Petr Kadlec]]
Why indeed. Note that the only thing special or magical about the template namespace is that {{something}} shortcuts to {{template:something}}. Other than that it's just another page.
I have no idea why users of a who are mad enough to want to edit a template but don't have an account should be disallowed from doing so, other than that we should be making it obligatory to require informed consent before exposing anyone to template syntax. As long as we're not doing that for logged in users, I frankly can't seen the difference.
--Martijn Hoekstra
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Sensitive templates get protected on an as-needed basis. We welcome contributions from anon users here.
On Thu, Apr 24, 2014 at 1:47 AM, Martijn Hoekstra <martijnhoekstra@gmail.com
wrote:
On Thu, Apr 24, 2014 at 10:13 AM, Petr Kadlec petr.kadlec@gmail.com wrote:
On Thu, Apr 24, 2014 at 10:01 AM, Thomas Gries mail@tgries.de wrote:
Do we really have the template Namespace on MediaWiki open for edits by anons?
Yes. https://www.mediawiki.org/wiki/Special:ListGroupRights
In my view, this should be changed.
Why? Do you know any WMF project where the whole Template namespace is semiprotected?
-- [[cs:User:Mormegil | Petr Kadlec]]
Why indeed. Note that the only thing special or magical about the template namespace is that {{something}} shortcuts to {{template:something}}. Other than that it's just another page.
I have no idea why users of a who are mad enough to want to edit a template but don't have an account should be disallowed from doing so, other than that we should be making it obligatory to require informed consent before exposing anyone to template syntax. As long as we're not doing that for logged in users, I frankly can't seen the difference.
--Martijn Hoekstra
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Hello,
recently I saw this edit of a template page on MediaWiki https://www.mediawiki.org/w/index.php?title=Template:RSSPost&oldid=97920... by an anon.
Do we really have the template Namespace on MediaWiki open for edits by anons?
In the past, /this /page was indeed a vey /sensitive /template because it determined the rendering of RSS feeds on MediaWiki pages. This was the reason why I was surprised yesterday, that it could be edited by someone without an account.
On /enwiki /I know many templates which are fully protected. This is why I expected that our documentation and developer MediaWiki wiki also protects Template pages. This was apparently not the case.
Regarding the Template:Repost page:
I deleted that specific page. it is not used any more, because the Extension:RSS only since a while templates from the (system messages) MediaWiki:namespace, which is protected by default.
Please delete my name from your mailing list.
www.wmoskowitz@aol.com
William Moskowitz
-----Original Message----- From: Thomas Gries mail@tgries.de To: Wikimedia developers wikitech-l@lists.wikimedia.org Sent: Thu, Apr 24, 2014 6:27 pm Subject: Re: [Wikitech-l] MediaWiki template page edit by IP?
Hello,
recently I saw this edit of a template page on MediaWiki https://www.mediawiki.org/w/index.php?title=Template:RSSPost&oldid=97920... by an anon.
Do we really have the template Namespace on MediaWiki open for edits by anons?
In the past, /this /page was indeed a vey /sensitive /template because it determined the rendering of RSS feeds on MediaWiki pages. This was the reason why I was surprised yesterday, that it could be edited by someone without an account.
On /enwiki /I know many templates which are fully protected. This is why I expected that our documentation and developer MediaWiki wiki also protects Template pages. This was apparently not the case.
Regarding the Template:Repost page:
I deleted that specific page. it is not used any more, because the Extension:RSS only since a while templates from the (system messages) MediaWiki:namespace, which is protected by default.
_______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
wikitech-l@lists.wikimedia.org