MediaWiki-l January 2022

mediawiki-l@lists.wikimedia.org

14 participants
9 discussions

Lis tes messages avant qu'ils ne soient effacés!
by Badoo 31 Dec '23

31 Dec '23

Lis ton message de Nganguem Victor avant qu'il ne soit effacé! Pour lire ton message, suis simplement ce lien: http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 D'autres personnes sont aussi présentes: Oded (Tel Aviv, Israël) Priya (Udaipur, Inde) RajaYogi BK (Udaipur, Inde) Karuna (Udaipur, Inde) Chika Reginald Onyia (Pnompen', Cambodge) ...Qui d'autre? http://eu1.badoo.com/chatnoirxx/in/p4hxwt052ok/?lang_id=6 Les liens ne fonctionnent pas dans ce message? Copie les dans la barre d'adresse de ton navigateur. Tu as reçu cet email suite à un message envoyé par Nganguem Victor de notre système. S'il s'agit d'une erreur, ignore simplement cet email. La requête sera alors effacée du système. Amuse-toi bien ! L'équipe Badoo Courrier automatique de Badoo suite à l'envoi d'un message à ton attention sur Badoo. Les réponses ne sont ni stockées, ni traitées. Si tu ne veux plus recevoir de message de Badoo, fais-le nous savoir: http://eu1.badoo.com/impersonation.phtml?lang_id=6&mail_code=65&email=media…

3 2

MediaWiki Language Extension Bundle 2022.01
by Kartik Mistry 27 Jan '22

27 Jan '22

Hello all, I would like to announce the release of MediaWiki Language Extension Bundle 2022.01. This bundle is compatible with '''MediaWiki 1.36''' or above and requires '''PHP 7.3.19''' or above. Next MLEB is expected to be released in 3 months. If there are very important bug fixes, we will do an intermediate release. Please give us your feedback at [[Talk:MLEB|https://www.mediawiki.org/wiki/Talk:MLEB]]. * Download: https://translatewiki.net/mleb/MediaWikiLanguageExtensionBundle-2022.01.tar… * sha256sum: 0cb434980b399f7bac42a92c9f171b6c9041cb998e3b2b0fcf16daf58c43fe61 * Signature: https://translatewiki.net/mleb/MediaWikiLanguageExtensionBundle-2022.01.tar… Quick links: * Installation instructions are at: https://www.mediawiki.org/wiki/MLEB * Announcements of new releases will be posted to a mailing list: https://lists.wikimedia.org/postorius/lists/mediawiki-i18n.lists.wikimedia.… * Report bugs to: https://phabricator.wikimedia.org/project/view/1464/ Release notes for each extension are below. -- Kartik Mistry == Highlights == * '''MLEB now requires MediaWiki 1.36 and PHP 7.3.19''' == Babel, cldr, CleanChanges and LocalisationUpdate == * Localisation and maintenance updates. == Translate == * Fix Special:PageMigration - Page search suggestion does not work ({{phab|T217726}}) * Fix UI issue: the page moves from bottom to top when new messages are loaded in List tab ({{phab|T295655}}, {{gerrit|738587}}) * Migrate tables to an abstract schema ({{phab|T268576}}, {{gerrit|735613}}) * Improve UX on Special:AggregateGroups and add collapsibility ({{phab|T90511}}) * Feature: Special:Translate: Make the target language visible in the translation UI ({{phab|T296987}}, {{gerrit|743383}}) * Feature: Special:Translate: Make the target language selector a bit more prominent ({{phab|T296986}}, {{gerrit|743397}}) * Performance: Special:ActiveLanguages should not perform slow queries if results are cached ({{phab|T285314}}, {{gerrit|747122}}) * Feature: Add a new Javascript hook, <code>mw.translate.translationView.stateChange</code>, fired when the state is updated ({{phab|T297129}}, {{gerrit|745997}}) * Remove unused Configure extension integration ({{gerrit|751382}}) * Feature: Add reason dropdown on PageTranslationDeletePage ({{phab|T153542}}, {{gerrit|754490}}) * Add filters to <code>meta=messagegroupstats</code> API ({{phab|T298736}}, {{gerrit|752000}}) * Allow exporting AggregateMessageGroups in offline format via CLI ({{phab|T299493}}, {{phab|T263268}}, {{gerrit|755356}}) === Breaking changes === * Remove backward compatibility for MW <= 1.35 ({{phab|T298788}}, {{gerrit|752166}}) == UniversalLanguageSelector == * Remove backward compatibility for MW <= 1.35 * Localisation and maintenance updates. === Font updates === * Add Awami Nastaliq font ({{phab|T290510}}, {{gerrit|737206}}) * Update OpenDyslexic ({{gerrit|737207}}) * Update GentiumPlus font ({{phab|T298613}}, {{gerrit|737206}}) -- Kartik Mistry | કાર્તિક મિસ્ત્રી kartikm.wordpress.com

1 0

Heads-up: Release branch cut for REL1_38 in two months
by Markus Glaser 25 Jan '22

25 Jan '22

Hello everyone, This is a reminder that we will be starting the release process for MediaWiki 1.38 in mid-March. By then, in about 8 weeks from now, a new branch REL1_38 will be cut from the development branch. If you are an extension developer or otherwise dependent on MediaWiki releases with your code, now it is time to check and fix your compatibility with the development branch, so that by the time the branch is cut, we have a working version of your code in its REL1_38 branch. If you hope to land a breaking change into MediaWiki core for this release, please make sure to do so soon so that extension developers have the time to make their adjustments. Regards, Markus User:Mglaser MediaWiki Stakeholders' Group

2 2

magic variable {{LOGGED-IN}} or similar?
by Patrick Schleizer 11 Jan '22

11 Jan '22

Is there a magic variable {{LOGGED-IN}} or a similar mechanism that could be used to detected from within the wiki markup, CSS or Extension:Widgets? Background: Creating menus / content which is different for anonymous visitors and logged in users (mostly wiki administrators). Cheers, Patrick

4 3

Move wiki to subfolder
by Marcus Buss 11 Jan '22

11 Jan '22

Hello! Maybe someone has a hint for this problem I have: I'd like to move an existing wiki to another place in my filestructure. Used to be: /pages/wiki /pages/mainsite (is entry point for 'domain.de') Should be changed to /pages/mainsite/wiki My goal: calling the wiki through 'domain.de/wiki' Mediawiki Version is 1.31.5. I copied files and directories to the subdirectory. Copied Database Tables to a new Database. Changed the IP path and database variables in localsettings. I executed update.php on the new copy. Now when I use the new url path 'domain.de/wiki' the browser will change the url to http://www.domain.de/index.php?title=Hauptseite <http://www.domain.de/index.php?title=Hauptseite> (removing the subfolder 'wiki' from the path), and show an error message: "The requested URL was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request." I then created a new subdomain 'wikinew.domain.de' aiming at the path 'domain.de/wiki' Now when using this subdomain, the copied wiki opens without error, everything looks fine, login works, page editing works, images are correctly displayed. Maybe someone can explain the behavior when calling domain.de/wiki? Did I forget some kind of configuration? Thanks for your help, Marcus

2 2

MediaWiki Extensions and Skins Security Release Supplement (1.35.5/1.36.3/1.37.1)
by Maryum Styles 10 Jan '22

10 Jan '22

Greetings- With the security/maintenance release of MediaWiki 1.35.5/1.36.3/1.37.1 [0], we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: == Dynamic Page List 3/ DPL3 == + (T292351, CVE-2021-41118) - ReDOS in DPL3 https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHS… == CheckUser == + (T292795, CVE-2021-46150) - XSS Vulnerability in Special:CheckUserLog https://gerrit.wikimedia.org/r/q/If7cd112e627f47f9aca69b380dde1634bf55f789 == WikibaseMediaInfo == + (T293556, CVE-2021-46146) - Stored XSS via WikibaseMediaInfo caption fields https://gerrit.wikimedia.org/r/q/I58d37fb59f998f5bec4a018bf9da96a777f8ff78 == UniversalLanguageSelector == + (T293749, CVE-2021-46149) - /w/api.php?action=languagesearch denial of service https://gerrit.wikimedia.org/r/q/Ide32704cca578b9aecbce34bdcc0ac25c2a09a4d == SecurePoll == + (T290808, CVE-2021-46148) - Users with no NDA can access confidential information https://gerrit.wikimedia.org/r/q/Ic7510be487a1bf9215de9ae6cf4a26fad96384c9 == Wikibase == + (T294693, CVE-2021-45473) - XSS on page information Wikibase central description https://gerrit.wikimedia.org/r/q/I3cd080a1a7dacd7396d37ee0c98cff0b4e241f8d == FileImporter == + (T296605, CVE-2021-45474) - XSS in Special:ImportFile URL https://gerrit.wikimedia.org/r/q/Id1c8910aeac5b452fbabeddab70360765518223e == EntitySchema == + (T296578, CVE-2021-45471) - Globally blocked IPs can edit EntitySchema items https://gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9, https://gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c == Wikibase == + (T297570, CVE-2021-45472) - XSS in Wikibase using formatter URL https://gerrit.wikimedia.org/r/q/I37ece1dfdc80d38055067c9c4fa73ba591acd8bd The Wikimedia Security Team recommends updating these extensions and/or skins to the current master branch or relevant, supported release branch [2] as soon as possible. Some of the referenced Phabricator tasks above _may_ still be private. Unfortunately, when security issues are reported, sometimes sensitive information is exposed and since Phabricator is historical, we cannot make these tasks public without exposing this sensitive information. If you have any additional questions or concerns regarding this update, please feel free to contact security(a)wikimedia.org or file a security task within Phabricator [3]. Note: The SecurePoll Extension had other enhancements that were related to the security bug [4] but did not address the security concerns directly. See Phabricator [5] for more information. [0] https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikime… [1] https://phabricator.wikimedia.org/T292236 [2] https://www.mediawiki.org/wiki/Version_lifecycle [3] https://www.mediawiki.org/wiki/Reporting_security_bugs [4] https://phabricator.wikimedia.org/T290808 [5] https://phabricator.wikimedia.org/T277353

1 0

Question DO YOU ADVISE FACEBOOK AND IG
by RaQuel Thomason 08 Jan '22

08 Jan '22

I have a maaajor issue minor ones sure ALWAYS W/ EVERYTHING I USE TO TESEAVH PIST TOOLS YEP I COULD NAME A DOZEN DAILY I COULD SUGGEST IMPROVEMENTS TO… HOW DO I DO THUS EXACTLY?… BUT THE major ONE IM Ref. to, IF FIXED it will be conducive to ALL SOCIAL MEDIA USERS. Please RESPOND, I WILL THEN FURTHER ADDRESS, My Issue w/ The MetaVerse. * I ACTUALLY CAN PROVIDE MANY IMPROVEMENTS TO BOTH (FB AND IG) AS A DYAD TEAM AND SUGGESTIONS ADDIND OTHER APPs TO JOIN RELATED TO SOCIAL MEDIA PLATFORM ITSELF. ~JUST A Question Waiting Patiently TO ASK. TY, RaQuelLynn “Amethyst 💜”

1 0

Minerva Neue skin will be bundled with MediaWiki 1.38
by Jon Robson 08 Jan '22

08 Jan '22

If you are not an extension developer, you can safely ignore this message. I am excited to announce that the Minerva Neue skin will be bundled with MediaWiki in 1.38 per https://phabricator.wikimedia.org/T191743 The Minerva Neue skin powers the mobile site of Wikimedia projects, so it makes sense to include this skin for 3rd party MediaWiki instances that want a responsive but simplified experience. The implication of this is that extension developers should be making sure their code compatible with MinervaNeue. Note, that Minerva Neue operates in two modes (a desktop or mobile mode) depending on whether MobileFrontend is installed, however, MobileFrontend is still not part of the MediaWiki bundle so this mode doesn't need to be tested at this point. You can tell if you are in Minerva desktop mode by testing in an incognito window and verifying that you see a more (ellipsis) dropdown in the toolbar. e.g. Test on https://en.wikipedia.org/wiki/Minerva?useskin=minerva NOT https://en.m.wikipedia.org/wiki/Minerva?useskin=minerva if you have any questions or concerns please feel free to reply to this e-mail or the Phabricator ticket. Thanks for reading! Jon

3 2

Removal of $wgUseCategoryBrowser configuration flag
by Jon Robson 07 Jan '22

07 Jan '22

MediaWiki has an experimental configuration flag $wgUseCategoryBrowser that alters the appearance of categories. If you don't use this flag or are not aware of it you can safely ignore this message. We plan to remove this configuration flag and associated code in MediaWiki 1.38 without deprecation warnings given its experimental nature: https://phabricator.wikimedia.org/T298553 If needed an extension can provide the same functionality, so if anyone needs this functionality please let us know by replying to this email or the Phabricator ticket to help guide us better. Thanks for reading Jon

5 6

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

MediaWiki-l January 2022