Either merge CategoryCloud and WikiCategoryTagCloud or archive one of the extensions
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	SamanthaNguyen
	Sep 23 2016, 1:05 AM

Description

Currently there are two extension that do the exact same thing (or at least, very similar things):

WikiCategoryTagCloud seems to be more stable (with less security holes based on the MediaWiki documentation), should CategoryCloud be marked as archived?

Event Timeline

SamanthaNguyen created this task.Sep 23 2016, 1:05 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 23 2016, 1:05 AM

SamanthaNguyen moved this task from Backlog to Feedback on the WikiCategoryTagCloud board.Sep 23 2016, 1:07 AM

Let's play a game. It's called "spot the XSS". How many can you find? I spotted two definitive ones and one possible one in CategoryCloud.

At least it won't run on modern-ish (like 1.20+ or so) MWs since it uses $wgMessageCache->addMessages. Archive the CategoryCloud extension, nobody should be using such buggy code with security issues.

Archiving on MediaWiki.org - https://www.mediawiki.org/w/index.php?diff=2244650
Archiving on WikiApiary - https://wikiapiary.com/w/index.php?diff=3087810

Either merge CategoryCloud and WikiCategoryTagCloud or archive one of the extensionsClosed, ResolvedPublicActions

Description

Event Timeline

Either merge CategoryCloud and WikiCategoryTagCloud or archive one of the extensions
Closed, ResolvedPublic
Actions