Page MenuHomePhabricator

Use custom UA in GenericActionApiClient including hash of wgServerName
Closed, ResolvedPublic

Description

We should grab the domain to use from https://www.mediawiki.org/wiki/Manual:$wgServerName
We should perform some hashing on it https://www.php.net/manual/en/function.hash.php
UA can be injected into GenericActionApiClient and used by the HTTP request factory

Event Timeline

Change 609126 had a related patch set uploaded (by Tobias Andersson; owner: Tobias Andersson):
[mediawiki/extensions/Wikibase@master] FP: GenericActionApiClient sends useragent

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/ /609126

Change 609126 merged by jenkins-bot:
[mediawiki/extensions/Wikibase@master] FP: GenericActionApiClient sends useragent

https://gerrit.wikimedia.org/r/609126

Change 610033 had a related patch set uploaded (by Tobias Andersson; owner: Tobias Andersson):
[mediawiki/extensions/Wikibase@master] FP: Add section about privacy

https://gerrit.wikimedia.org/r/610033

@toan here is a revised version of your proposed text for the fed props documentation:

"Once you enable Federated Properties in your Wikibase installation, all requests to the federation source Wiki will include an anonymized unique identifier as the useragent. This will be used only to detect abnormal traffic to the source Wiki for the purposes of preventing abuse."

@toan here is a revised version of your proposed text for the fed props documentation:

"Once you enable Federated Properties in your Wikibase installation, all requests to the federation source Wiki will include an anonymized unique identifier as the useragent. This will be used only to detect abnormal traffic to the source Wiki for the purposes of preventing abuse."

done!

Change 610033 merged by jenkins-bot:
[mediawiki/extensions/Wikibase@master] FP: Add section about privacy

https://gerrit.wikimedia.org/r/610033