Hey folks❣ Another problem with this message: with the new Vector appearance, in a narrow window the language selector can be far from the top. In a 960-pixel wide Firefox window (half my HD screen), the mw-sidebar pushes the title and language links down so that they'res nearly off-screen screen down the page. I saw _Go to top_ and looked at the top for the language selector, but it's near the bottom of the screen along with the title (see screenshot below). Maybe the link text could be "go to page title" or "go to language selector".

I created T287212 while Legoktm was already fixing it 😄

I tried out the long-awaited return of Score on testwiki and it seems good. It's... surprising the OS features you can invoke in Lilypond but I don't understand them enough to seriously attack the Shellbox's sandboxing.

I think this is happening again on some pages on testwiki where the fix for T257066 is under test, e.g. Category:Musical pages and Frankenstein II.. Happens in both Firefox and chromium-browser. What's puzzling is it doesn't happen on all pages using Score, and I can copy the <score> content to another page and sometimes it renders fine. Heisenbug! And on a page that's messed up, a File:somefile.mid TMH player will also appear wrong.

In T49578#3857903 back in 2017, @Ebe123 wrote:

The new -dcrop option will be in the next stable release (2.20), which may be in the next few months.

Hey, thanks for y'all's work on this serious issue 💟 . Some of the disclosed vulnerabilities refer to including SVG and PS files with embedded-ps and embedded-svg commands. I doubt any uses of Extension:Score on WMF wikis use this feature, so could Lilypond gain compile settings to disallow, and not even compile the code for, all such insecure commands?

In T253698#6167755, @bd808 wrote:

What email address do you want attached to your new Developer account @Skierpage?

The usual where Phabricator is already sending these updates: info AT my username/web site (security through obscurity.) No rush, low priority, thanks y'all!

... ancient process...

Nice sleuthing, occasionally an overgrown untended wiki pays off 😉 .

In T253522#6162105, @TheDJ wrote:

The software used for TMH (and most of the media processing) runs on servers that are not the same as those rendering the pages.

Ahh. I wonder if there's some other way to figure out the version on the server, maybe some config file or in WMF's apt repository. Definitely low-priority.

FYI I updated the Score attribute documentation on Extension:Score and English Wikipedia Score Help, mentioning the deprecation of override_midi and override_audio. Editors expressed some concern on their talk pages (no good deed goes unpunished 😄).