All right, I found one thing: The page that was at [[Wiktionary:Recentchanges]] (which on en: for example was a list of useful links, and a short list of requested articles) has been superseded by [[MediaWiki:Recentchangestext]].
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
*Muke!
Muke Tever wrote:
All right, I found one thing: The page that was at [[Wiktionary:Recentchanges]] (which on en: for example was a list of useful links, and a short list of requested articles) has been superseded by [[MediaWiki:Recentchangestext]].
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
*Muke!
Yesterday night I have worked for more than 2 hours to get the special characters nicely in a html table. Today, I find it is overwritten. My edits are still in the history, but it doesn't matter whether I change MediaWiki:Copyrightwarning or Sjabloon:Copyrightwarning (sjabloon is Dutch for template). I never see the javascript stuff to allow the insertion of accented characters. So what is going on? The accented characters as I was making them, would allow the easy insertion of accented characters in French, German, Dutch, Spanish, Italian, Turkish, Romanian, Esperanto and a lot of other languages and I had just gotten started on the IPA symbols. I was planning to introduce them to the other Wiktionaries as well, as soon as I had them done nicely in nl.wiktionary.org. Now they don't show up anymore. This is on the Dutch Wiktionary, but apparently the same thing has happened on the other Wiktionaries. Polyglot
On Dec 21, 2004, at 6:20 AM, Muke Tever wrote:
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
Arbitrary HTML and JavaScript in the MediaWiki: messages is dangerous, and is something that's being phased out. There are a couple reasons for this.
The first is security: on our larger sites we have literally *hundreds* of sysops with permissions to edit these messages. With those numbers, it's hard to assign sufficient 'trust'; even if we believe every one of them to be upstanding, well-meaning individuals the likelihood of a compromised account increases with every new sysop. If a broken-into (or malicious) sysop account can be used to add arbitrary HTML or JavaScript code, it could be used to exploit security vulnerabilities in web browsers or more simply attack and subvert the wiki accounts of other users. Such an attack might be found and reverted immediately, or it might attack dozens or hundreds -- or thousands -- of visitors before being stopped.
The second is robustness: accidentally or maliciously placed invalid HTML could break the site. As the web moves towards more XML (which is very strict about proper markup syntax) it can become difficult to recover from such a breakage without manual intervention.
There's still a lot of places with raw HTML in messages, so it's an ongoing process. Text fragments are being moved to either plaintext or wikitext, depending on their use and purpose. (Paragraph-level blocks such as the copyright warning are generally wikitext.)
It would probably be worthwhile to write up the special character inserter as a MediaWiki extension -- then it could be inserted into the wikitext message in a safe, secure way.
-- brion vibber (brion @ pobox.com)
On Tue, 21 Dec 2004 16:32:29 -0800, Brion Vibber brion@pobox.com wrote:
Arbitrary HTML and JavaScript in the MediaWiki: messages is dangerous, and is something that's being phased out. There are a couple reasons for this.
The first is security: on our larger sites we have literally *hundreds* of sysops with permissions to edit these messages.
[snip etc.]
I thought this was likely to be the case.
It would probably be worthwhile to write up the special character inserter as a MediaWiki extension -- then it could be inserted into the wikitext message in a safe, secure way.
It would indeed. A lot of the characters needed for the dictionary are not easy for many people to access. Copy-and-paste is fine, but point-and- click would be much more convenient, if it can be securely reimplemented.
*Muke!
Brion Vibber wrote:
On Dec 21, 2004, at 6:20 AM, Muke Tever wrote:
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
Arbitrary HTML and JavaScript in the MediaWiki: messages is dangerous, and is something that's being phased out. There are a couple reasons for this.
The first is security: on our larger sites we have literally *hundreds* of sysops with permissions to edit these messages. With those numbers, it's hard to assign sufficient 'trust'; even if we believe every one of them to be upstanding, well-meaning individuals the likelihood of a compromised account increases with every new sysop. If a broken-into (or malicious) sysop account can be used to add arbitrary HTML or JavaScript code, it could be used to exploit security vulnerabilities in web browsers or more simply attack and subvert the wiki accounts of other users. Such an attack might be found and reverted immediately, or it might attack dozens or hundreds -- or thousands -- of visitors before being stopped.
The second is robustness: accidentally or maliciously placed invalid HTML could break the site. As the web moves towards more XML (which is very strict about proper markup syntax) it can become difficult to recover from such a breakage without manual intervention.
There's still a lot of places with raw HTML in messages, so it's an ongoing process. Text fragments are being moved to either plaintext or wikitext, depending on their use and purpose. (Paragraph-level blocks such as the copyright warning are generally wikitext.)
It would probably be worthwhile to write up the special character inserter as a MediaWiki extension -- then it could be inserted into the wikitext message in a safe, secure way.
-- brion vibber (brion @ pobox.com)
Hi Brion,
I understand the security implications and I must admit I was already somewhat surprised that it was possible to add javascript to these pages. I have been creating a very comprehensive template for allowing to insert all the accented characters I was able to cram out of my Mandrake Linux Unicode keyboard. It wasn't totally ready yet and it was good to be able to develop it in real time. I will forward it to you tonight. I don't know how to create MediaWiki extensions. Is there a place where this is described. I can program a little, so I should be able to do it with just a few pointers.
Polyglot
I created a monobook.js file to add this capability for myself on en.wiktionary. Basically because I wanted to be able to use various sets of special characters from time to time and didn't want to force them onto people who didn't want them on en.
So you could certainly make such a .js that any interested user can copy to their own .js file. Or maybe there is a per-wiki .js that a sysop can add to. That ought to be a more structured long term solution.
Please feel free to look at http://en.wiktionary.org/wiki/User:Hippietrail/monobook.js - this is my first ever Javascript and I know it's horrible so also feel free to improve it. I've been wanting to add a per-language popup menu for instance. Also with the new upgrade I want the text to appear before the "templates in this article" stuff.
Andrew Dunbar (hippietrail)
On Wed, 22 Dec 2004 08:04:09 +0100, cookfire cookfire@softhome.net wrote:
Brion Vibber wrote:
On Dec 21, 2004, at 6:20 AM, Muke Tever wrote:
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
Arbitrary HTML and JavaScript in the MediaWiki: messages is dangerous, and is something that's being phased out. There are a couple reasons for this.
The first is security: on our larger sites we have literally *hundreds* of sysops with permissions to edit these messages. With those numbers, it's hard to assign sufficient 'trust'; even if we believe every one of them to be upstanding, well-meaning individuals the likelihood of a compromised account increases with every new sysop. If a broken-into (or malicious) sysop account can be used to add arbitrary HTML or JavaScript code, it could be used to exploit security vulnerabilities in web browsers or more simply attack and subvert the wiki accounts of other users. Such an attack might be found and reverted immediately, or it might attack dozens or hundreds -- or thousands -- of visitors before being stopped.
The second is robustness: accidentally or maliciously placed invalid HTML could break the site. As the web moves towards more XML (which is very strict about proper markup syntax) it can become difficult to recover from such a breakage without manual intervention.
There's still a lot of places with raw HTML in messages, so it's an ongoing process. Text fragments are being moved to either plaintext or wikitext, depending on their use and purpose. (Paragraph-level blocks such as the copyright warning are generally wikitext.)
It would probably be worthwhile to write up the special character inserter as a MediaWiki extension -- then it could be inserted into the wikitext message in a safe, secure way.
-- brion vibber (brion @ pobox.com)
Hi Brion,
I understand the security implications and I must admit I was already somewhat surprised that it was possible to add javascript to these pages. I have been creating a very comprehensive template for allowing to insert all the accented characters I was able to cram out of my Mandrake Linux Unicode keyboard. It wasn't totally ready yet and it was good to be able to develop it in real time. I will forward it to you tonight. I don't know how to create MediaWiki extensions. Is there a place where this is described. I can program a little, so I should be able to do it with just a few pointers.
Polyglot _______________________________________________ Wiktionary-l mailing list Wiktionary-l@Wikipedia.org http://mail.wikipedia.org/mailman/listinfo/wiktionary-l
Brion Vibber wrote:
On Dec 21, 2004, at 6:20 AM, Muke Tever wrote:
Now, you help me. :p It used to be that a few wiktionaries edited [[MediaWiki:Copyrightwarning]] to allow users to click and insert necessary special characters... but it seems it is no longer possible to insert the script (/style/wikibits.js) to allow this. Is there a workaround, or a better way to do it now, or will it just have to revert to a copy-and-paste plain-text list?
Arbitrary HTML and JavaScript in the MediaWiki: messages is dangerous, and is something that's being phased out. There are a couple reasons for this.
The first is security: on our larger sites we have literally *hundreds* of sysops with permissions to edit these messages. With those numbers, it's hard to assign sufficient 'trust'; even if we believe every one of them to be upstanding, well-meaning individuals the likelihood of a compromised account increases with every new sysop. If a broken-into (or malicious) sysop account can be used to add arbitrary HTML or JavaScript code, it could be used to exploit security vulnerabilities in web browsers or more simply attack and subvert the wiki accounts of other users. Such an attack might be found and reverted immediately, or it might attack dozens or hundreds -- or thousands -- of visitors before being stopped.
The second is robustness: accidentally or maliciously placed invalid HTML could break the site. As the web moves towards more XML (which is very strict about proper markup syntax) it can become difficult to recover from such a breakage without manual intervention.
There's still a lot of places with raw HTML in messages, so it's an ongoing process. Text fragments are being moved to either plaintext or wikitext, depending on their use and purpose. (Paragraph-level blocks such as the copyright warning are generally wikitext.)
It would probably be worthwhile to write up the special character inserter as a MediaWiki extension -- then it could be inserted into the wikitext message in a safe, secure way.
-- brion vibber (brion @ pobox.com)
Hi Brion,
I have spent more than 5 hours on creating the following, so I hope it is useful. (See attachment)
Jo
On Dec 22, 2004, at 5:10 PM, Jo wrote:
I have spent more than 5 hours on creating the following, so I hope it is useful. (See attachment)
Sorry, the mailing list automatically discards most attachments. (We've had problems in the past with viruses mailing themselves to the lists with a fake return address from list members.)
Open an enhancement request at http://bugzilla.wikimedia.org/ and attach it there.
-- brion vibber (brion @ pobox.com)
Brion Vibber wrote:
On Dec 22, 2004, at 5:10 PM, Jo wrote:
I have spent more than 5 hours on creating the following, so I hope it is useful. (See attachment)
Sorry, the mailing list automatically discards most attachments. (We've had problems in the past with viruses mailing themselves to the lists with a fake return address from list members.)
Open an enhancement request at http://bugzilla.wikimedia.org/ and attach it there.
I will do that. Thanks!
Jo
I've created a <charinsert> extension which produces the little javascript inserter bits for the characters you feed it. This can be used in wikitext, such as the 'copyrightwarning' messages which was previously HTML.
I set up the English Wikipedia chars again using this: http://en.wikipedia.org/wiki/MediaWiki:Copyrightwarning
Please feel free to set up the appropriate equivalents at the other 'pedias, 'tionaries, and all.
-- brion vibber (brion @ pobox.com)
On Thu, 23 Dec 2004 05:53:06 -0800, Brion Vibber brion@pobox.com wrote:
I've created a <charinsert> extension which produces the little javascript inserter bits for the characters you feed it. This can be used in wikitext, such as the 'copyrightwarning' messages which was previously HTML.
Excellent! Thanks!
*Muke!
Brion Vibber wrote:
I've created a <charinsert> extension which produces the little javascript inserter bits for the characters you feed it. This can be used in wikitext, such as the 'copyrightwarning' messages which was previously HTML.
I set up the English Wikipedia chars again using this: http://en.wikipedia.org/wiki/MediaWiki:Copyrightwarning
Please feel free to set up the appropriate equivalents at the other 'pedias, 'tionaries, and all.
Outstanding! Thanks,
Polyglot
On Thu, 23 Dec 2004 05:53:06 -0800, Brion Vibber brion@pobox.com wrote:
I've created a <charinsert> extension which produces the little javascript inserter bits for the characters you feed it. This can be used in wikitext, such as the 'copyrightwarning' messages which was previously HTML.
Hmm, it doesn't seem to work properly. On la: I click the y-breve (which is two unicode characters, y and combining breve) and I get: y%CC%86%CC%86
If I click the o-breve (only one character) I get: %C5%8F
But it only seems to do this in Opera, as I just checked in Firefox and it works okay.
[Of course, the insert feature didn't really work in Opera to begin with; clicking to insert a character inserts it in a text field between the edit toolbar and the main article-editing text area, from whence it can be easily copied and pasted--Firefox doesn't even have this text field; I was surprised at how much easier inserting characters was, the first time I tried it.]
*Muke!
wiktionary-l@lists.wikimedia.org