Page MenuHomePhabricator

Remove $wgApiFrameOptions = 'SAMEORIGIN' override for UploadWizard wikis
Closed, ResolvedPublic

Description

After T126763, UploadWizard will no longer rely on loading api.php in an iframe, and so we will be able to remove $wgApiFrameOptions = 'SAMEORIGIN' override for UploadWizard wikis. ('DENY' is the default.)

Event Timeline

So create an uploadwizard dblist would be convenient to get in sync wmgUseUploadWizard and wgApiFrameOptions.

We could also define wgApiFrameOptions according wmgUseUploadWizard but that would be less flexible.

Change 282768 had a related patch set uploaded (by Bartosz Dziewoński):
Remove $wgApiFrameOptions override for UploadWizard wikis, no longer needed

https://gerrit.wikimedia.org/r/282768

Change 282768 merged by jenkins-bot:
Remove $wgApiFrameOptions override for UploadWizard wikis, no longer needed

https://gerrit.wikimedia.org/r/282768

Mentioned in SAL [2016-04-11T23:09:22Z] <dereckson@tin> Synchronized wmf-config/InitialiseSettings.php: Remove $wgApiFrameOptions = SAMEORIGIN override for UploadWizard wikis (Task T131182, [[Gerrit:282768]]) (duration: 00m 27s)

Mentioned in SAL [2016-04-11T23:19:18Z] <dereckson@tin> Synchronized wmf-config/CommonSettings.php: Remove $wgApiFrameOptions = SAMEORIGIN override for UploadWizard wikis (Task T131182, [[Gerrit:282768]]) (duration: 00m 31s)