Page MenuHomePhabricator
Create Task
Maniphest T208177

MediaWiki:Vector.css on ka.wp loads TTF from external site
Closed, ResolvedPublic
Actions

Description

https://ka.wikipedia.org/w/index.php?title=მედიავიკი:Vector.css&oldid=3346188 loads a font from a third-party domain 150.ge.

That's a privacy violation and should be removed.

Related Objects

Event Timeline

Aklapper created this task.Oct 28 2018, 9:09 PM
Jayprakash12345 subscribed.Oct 29 2018, 4:22 AM
Legoktm triaged this task as Unbreak Now! priority.Oct 29 2018, 6:34 PM
Legoktm subscribed.

I've escalated this to stewards at https://meta.wikimedia.org/wiki/Steward_requests/Miscellaneous#Please_remove_privacy_violating_site_CSS

In the future these kinds of issues should be treated as Unbreak Now!

Restricted Application added subscribers: Liuxinyu970226, TerraCodes. · View Herald TranscriptOct 29 2018, 6:34 PM
Legoktm added a comment.Oct 29 2018, 6:37 PM

Also this managed to escape my audit-resources script, because it never hit a page with that font/CSS class I guess. We could try parsing the CSS with css-sanitizer and see where it flags?

Legoktm closed this task as Resolved.Oct 29 2018, 8:57 PM
Legoktm assigned this task to Ajraddatz.

https://ka.wikipedia.org/w/index.php?title=%E1%83%9B%E1%83%94%E1%83%93%E1%83%98%E1%83%90%E1%83%95%E1%83%98%E1%83%99%E1%83%98%3AVector.css&type=revision&diff=3578538&oldid=3346188

Liuxinyu970226 unsubscribed.Nov 2 2018, 5:04 AM
sbassett moved this task from Intake to Done on the Privacy board.Oct 16 2019, 4:35 PM
Aklapper mentioned this in T313653: MediaWiki:Gadget-mathjax.js on ja.wikisource loads third-party content.Jul 23 2022, 9:08 AM
Aklapper mentioned this in T313654: MediaWiki:Gadget-webfont.js on zh.wikipedia loads fonts from Toolforge.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL