Page MenuHomePhabricator

Security review for TemplateWizard extension
Closed, ResolvedPublic

Description

Project Information

Description of the tool/project

The extension adds a WikiEditor gadget to allow users to populate templates more easily using a dialog. This functionality is already present in VE and 2017 Wikitext editor but this project is aimed at the 2006 wikitext editor.
Note that most of the extension is written in JavaScript.

Description of how the tool will be used at WMF

The extension will be deployed on all Wikimedia wikis. The template information for the templates will come from TemplateData. In cases where there is no TemplateData, the extension attempts to "guess" template parameters by parsing the template text.

Dependencies

TemplateData extension.

Has this project been reviewed before?

No.

Working test environment

  1. Setup MediaWiki
  2. Install WikiEditor, TemplateData and TemplateWizard extensions.
  3. Create a template to test with.
  4. Go to the 2006 wikitext editor on a page and click the TemplateWizard icon (puzzle piece) in the toolbar to test it out.

You can see it in action here: http://commtech.wmflabs.org/

Post-deployment

Community-Tech is responsible for the project. Lead developer is @Samwilson and product owner is @Niharika.

Related Objects

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Niharika updated the task description. (Show Details)
Niharika added a subscriber: Samwilson.

@JBennett Hi. Do we need to do something in order to get this prioritized? This project came out of the 2017 Wishlist survey and we're working on a timeline.

@Reedy - Any update? Did you want to do a walkthrough with the developer for this one or just look at the code?

@Reedy - Any update?

My hand is getting better, stitches are coming out tomorrow. Due to a mixture of restrictive dressings and my hand being sore (I'm right handed), putting pressure on my little finger just makes it more so. As such for the last two weeks I've been limiting the amount of time I spend on my laptop because it just ends up being uncomfortable and sore. Not so useful for healing.

Which has meant more broken up time, and other stuff to do.

To answer your actual question... I'm hoping to get this finished off by the end of the week

@Reedy Poke. I see you avoided saying end of *which* week. :)

Haha. I did mean the end of the current week, ie the one just finished.

It's ok from me

Minor aside: PhpStorm is complaining about the objects in the PHP functions being passed by reference, but don't need to be.

@Samwilson: ^ (In case you want to want to fix the variables passed by reference.)

Change 454716 had a related patch set uploaded (by Samwilson; owner: Samwilson):
[mediawiki/extensions/TemplateWizard@master] Remove redundant pass-by-reference for objects in hook handlers

https://gerrit.wikimedia.org/r/454716

My PhpStorm doesn't seem to have an inspection for that. What's it called?

My PhpStorm doesn't seem to have an inspection for that. What's it called?

It's a plugin, has quite a few useful/interesting things - "Php Inspections (EA Extended)"

https://github.com/kalessil/phpinspectionsea

Change 454716 merged by jenkins-bot:
[mediawiki/extensions/TemplateWizard@master] Remove redundant pass-by-reference for objects in hook handlers

https://gerrit.wikimedia.org/r/454716