Page MenuHomePhabricator

Ordinary pages can still be loaded as javascript
Closed, ResolvedPublic

Description

Per https://lists.wikimedia.org/pipermail/wikitech-ambassadors/2018-September/001955.html, "we are no longer allowing ordinary pages to be loaded as javascript (That is, ?action=raw&ctype=text/javascript )."

This does not appear to be the case.

I created "TNT Test OhYes" (old rev) on test.wikipedia, and could load it via mw.loader.load('//test.wikipedia.org/w/index.php?title=TNT_Test_OhYes&action=raw&ctype=text/javascript'); in User:TNTPublic2/common.js.

I've done a couple of similar tests on enwp just in case test.wikipedia is behaving differently for some odd reason - ordinary pages can still be loaded as JS.

As the change should only allow "fully protected pages in the MediaWiki: namespace or user javascript subpages" to be loaded as JS, it's possible the change has not worked as expected.

I cannot find any mention of a phabricator task (though it's probably understandably hidden) - it is possible the change was reverted, in which case apologies for the pointless task.

Event Timeline

Patch got dropped. Don't know why. fixed now.

greg subscribed.

Patch got dropped. Don't know why. fixed now.

So is this resolved then? (Removing Release-Engineering-Team from this task, we're on the other root cause one)

Bawolff claimed this task.
Bawolff changed the visibility from "Custom Policy" to "Public (No Login Required)".Oct 21 2018, 7:41 PM