Isolate wikidata.org cookies and CORS policies
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• csteipp
	Aug 5 2015, 9:02 PM

Description

If we're deploying wqds to a wikidata.org subdomain,

cookies for the domain need to be set for explicit subdomains that need them
CORS policy needs to be updated to whitelist only subdomains that need it

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Isolate wikidata.org cookies and CORS policies	operations/mediawiki-config	master	+3 -2

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Open	None	T67626 [Epic] Support for queries on-wiki (automated list generation)
Resolved	Smalyshev	T85159 [EPIC] Deploy a Wikidata Query Service into production
Resolved	Joe	T107602 Set up a public interface to the wikidata query service
Resolved	• Deskana	T105196 Security review for Wikidata Query Service code before deploying to production hardware
Resolved	• csteipp	T90115 BlazeGraph Security Review
Resolved	None	T108101 Isolate wikidata.org cookies and CORS policies
Resolved	Bene	T112087 [Bug] m.wikidata.org is not CORS whitelisted
Resolved	• csteipp	T100413 "You are centrally logged in." toast on every page view on commons
Open	None	T109538 Vagrant wikis should have mobile site setup when MobileFrontend role is enabled
Resolved	• Gilles	T54302 Varnish vagrant role

Event Timeline

• csteipp created this task.Aug 5 2015, 9:02 PM

• csteipp raised the priority of this task from to Medium.

• csteipp updated the task description. (Show Details)

• csteipp added projects: Wikidata-Query-Service, Wikidata, Discovery-ARCHIVED.

• csteipp added subscribers: • JohnLewis, hoo, • GWicke and 23 others.

Smalyshev added a project: Discovery-Wikidata-Query-Service-Sprint.Aug 5 2015, 10:35 PM

Smalyshev set Security to None.

MrStradivarius unsubscribed.Aug 6 2015, 4:04 PM

Smalyshev raised the priority of this task from Medium to High.Aug 6 2015, 8:13 PM

Lydia_Pintscher moved this task from incoming to monitoring on the Wikidata board.Aug 7 2015, 4:29 PM

Change 230247 had a related patch set uploaded (by Legoktm):
Isolate wikidata.org cookies and CORS policies

https://gerrit.wikimedia.org/r/230247

gerritbot added a project: Patch-For-Review.Aug 7 2015, 10:49 PM

Smalyshev added a parent task: T90115: BlazeGraph Security Review.Aug 12 2015, 12:04 AM

• csteipp mentioned this in T90115: BlazeGraph Security Review.Aug 12 2015, 8:20 PM

Change 230247 merged by jenkins-bot:
Isolate wikidata.org cookies and CORS policies

https://gerrit.wikimedia.org/r/230247

Legoktm mentioned this in rOMWC0275738d2d10: Isolate wikidata.org cookies and CORS policies.Aug 12 2015, 11:02 PM

Deployed. I'll send a heads-up to wikidata-tech about this change.

https://lists.wikimedia.org/pipermail/wikidata-tech/2015-August/000813.html

Smalyshev moved this task from Backlog to Done on the Discovery-Wikidata-Query-Service-Sprint board.Aug 12 2015, 11:30 PM

jeremyb-phone added a subscriber: jeremyb.Aug 13 2015, 12:28 PM

It seems we forgot about m.wikidata.org .

m.wikidata.org will get fixed with a general mobile fix-- it should already
work for non-js browsers. I just haven't had the time to put in the js fix,
but if wikidata is getting significant mobile traffic, I can up the
priority of that.

It does not right now but that will hopefully change in the next month depending on Bene's work during his internship. He'll make the mobile version work better so we can hopefully then switch to redirecting people on mobile there by default.

JanZerebecki moved this task from monitoring to ready to go on the Wikidata board.Aug 14 2015, 5:22 PM

JanZerebecki moved this task from ready to go to consider for next sprint on the Wikidata board.

Thanks Lydia. T100413 is the task for that work.

Lydia_Pintscher moved this task from consider for next sprint to ready to go on the Wikidata board.Aug 17 2015, 1:23 PM

Smalyshev removed projects: Discovery-Wikidata-Query-Service-Sprint, Discovery-ARCHIVED, Wikidata-Query-Service.Aug 20 2015, 6:49 PM

Legoktm removed Legoktm as the assignee of this task.Sep 7 2015, 5:02 AM

JanZerebecki added a subtask: T100413: "You are centrally logged in." toast on every page view on commons.Sep 10 2015, 11:54 AM

JanZerebecki moved this task from ready to go to blocked on others on the Wikidata board.

JanZerebecki removed a subtask: T100413: "You are centrally logged in." toast on every page view on commons.Sep 10 2015, 11:57 AM