Avoid third party resources from *.wikimedia.it websites
Closed, ResolvedPublic3 Estimated Story Points
Actions

Assigned To

None

Authored By

	valerio.bozzolan
	Nov 2 2020, 9:30 AM

Description

There are some third party resources on the www.wikimedia.it website. Some of them:

fonts.googleapis.com (thanks to T282613)
ajax.googleapis.com (thanks to T282613)
google.com (thanks to T282613)
gstatic.com
webarea.services (this is simply our CRM service provider)

There are also third party resources that should be removed from sostieni.wikimedia.it (info):

How:

just dropping these dependencies
or replacing them with local replacements

Related Objects
Search...

Status	Assigned	Task
Resolved	None	T270616 Review Wikimedia Italia's technologies to keep everything in compliance with current policies
Open	None	T318114 Evaluate "zero cookie" goal on WMIT Matomo
Resolved	None	T266998 Avoid third party resources from *.wikimedia.it websites
Resolved	valerio.bozzolan	T270746 Deploy a Matomo instance in matomo.wikimedia.it (server wmi-fabula)
Resolved	valerio.bozzolan	T270776 Install PHP-FPM in Wikimedia Italia VPS wmi-fabula (to coexist PHP 5.6 with 7.3)
Resolved	Laurentius	T272552 Setup valid SMTP credentials in all services hosted on the WMIT webserver
Resolved	valerio.bozzolan	T282613 Deploy a KISS Google Font proxy for Wikimedia Italia (fonts.wikimedia.it)
Resolved	MauroBianchiInmagik	T345543 Drop Google Fonts from app.wikilovesmonuments.it

Event Timeline

valerio.bozzolan created this task.Nov 2 2020, 9:30 AM

valerio.bozzolan updated the task description. (Show Details)Nov 2 2020, 10:08 AM

• Hermann added a parent task: T267016: Plan for november meeting with Göteborgs museer.Nov 2 2020, 1:21 PM

valerio.bozzolan removed a parent task: T267016: Plan for november meeting with Göteborgs museer.Nov 2 2020, 1:24 PM

valerio.bozzolan triaged this task as Medium priority.Nov 23 2020, 9:35 PM

valerio.bozzolan set the point value for this task to 3.

valerio.bozzolan added a parent task: T270616: Review Wikimedia Italia's technologies to keep everything in compliance with current policies.Dec 21 2020, 11:11 AM

valerio.bozzolan mentioned this in T270746: Deploy a Matomo instance in matomo.wikimedia.it (server wmi-fabula).Dec 23 2020, 12:00 AM

valerio.bozzolan updated the task description. (Show Details)Dec 30 2020, 6:48 AM

valerio.bozzolan added a subtask: T270746: Deploy a Matomo instance in matomo.wikimedia.it (server wmi-fabula).Dec 30 2020, 2:34 PM

valerio.bozzolan closed subtask T270746: Deploy a Matomo instance in matomo.wikimedia.it (server wmi-fabula) as Resolved.Jan 20 2021, 4:50 PM

This is trivial to do, you only have to go to the admin page and set it to use local fonts. If the chosen font is not available, you upload it locally. For reference the administrator can look at our previous Wordpress installation which used to be at www.wikimedia.it, where all these problems had already been solved.

In T266998#6789385, @Nemo_bis wrote:

This is trivial to do, you only have to go to the admin page and set it to use local fonts. If the chosen font is not available, you upload it locally. For reference the administrator can look at our previous Wordpress installation which used to be at www.wikimedia.it, where all these problems had already been solved.

Yup. Me and you could fix the external fonts with great pleasure. Sadly our upstream provider has an exclusive management at the time of writing... for example the WordPress theme is read-only and no FTP credentials were provided to the association.

(Talking with @Maupao70 few days ago he confirmed that these things will be re-discussed with the provider during the next meeting to be held next week.)

valerio.bozzolan renamed this task from Avoid third party resources from wikimedia.it to Avoid third party resources from www.wikimedia.it.Feb 8 2021, 8:36 AM

valerio.bozzolan updated the task description. (Show Details)

To avoid having to download fonts every time (which increases costs) we can eventually implement a Google Font proxy cache in Wikimedia Italia.

I successfully implemented this in Border Radio some days later:

https://gitpull.it/T776

Maybe we can expose such service as http://gfont-cache.wikimedia.it or whatever. What do you think about @Nemo_bis @Laurentius?

Nice! But wouldn't be simpler to just make a local of the fonts we use?

In T266998#6968737, @Laurentius wrote:

Nice! But wouldn't be simpler to just make a local of the fonts we use?

Indeed. asd

In T266998#6968737, @Laurentius wrote:

Nice! But wouldn't be simpler to just make a local of the fonts we use?

This was also the point of view of the company that manages the site. After a month they didn't make the change.

To be honest I also absolutely don't know how to replace the dynamic fonts picked by the fancy WordPress editor. I'm starting to think the proxy is really simpler.

Well, the point is to have a simple way to avoid third-party resources; whatever is simpler is ok.

In T266998#7077624, @Laurentius wrote:

Well, the point is to have a simple way to avoid third-party resources; whatever is simpler is ok.

Uhm. Yup. We can... shutdown the website! Thaaat's a simple red button to avoid this and much other issues!

Well, why do we need a Wordpress website when we already have a wiki, after all? :-)

valerio.bozzolan closed subtask T282613: Deploy a KISS Google Font proxy for Wikimedia Italia (fonts.wikimedia.it) as Resolved.May 29 2021, 8:27 PM

valerio.bozzolan updated the task description. (Show Details)May 29 2021, 10:02 PM

So. I've done some A/B tests after this:

T282613: Deploy a KISS Google Font proxy for Wikimedia Italia (fonts.wikimedia.it)

And we were able to kill 3 of the listed dependencies:

fonts.googleapis.com
ajax.googleapis.com
google.com

With this snippet:

P16237 Adopt Google Font proxy for Wikimedia.it WordPress theme

1	<?php
2	/*
3	* Enable a Google Font proxy
4	*
5	* Author: Valerio Bozzolan
6	* License: GNU General Public License v2 or later
7	* Date: 2021
8	*
9	* See https://phabricator.wikimedia.org/T282613
10	* See https://gitpull.it/T776
11	* See https://gitpull.it/R26:f8b39ca15e8ba48a92fb0d58c2772e9b02691059
12	*/
13
14	/**
15	* Local Google Font cache
16	*/
17	define( 'GOOGLE_FONT_PROXY', 'fonts.wikimedia.it' );
18
19	/**
20	* Convert a Google Font domain to your local proxy cache
21	*
22	* See https://phabricator.wikimedia.org/T266998
23	*/
24	function convert_google_font_to_local_proxy( $url ) {
25	return str_replace( 'fonts.googleapis.com', GOOGLE_FONT_PROXY, $url );
26	}
27
28	/**
29	* Avoid Google Fonts in your stylesheets
30	*
31	* https://phabricator.wikimedia.org/T282613
32	*/
33	add_filter( 'style_loader_src', 'convert_google_font_to_local_proxy' );
34
35	/**
36	* Avoid Google Fonts in your DNS prefetch
37	*
38	* https://phabricator.wikimedia.org/T282613
39	*/
40	add_filter( 'wp_resource_hints', function( $urls ) {
41	foreach( $urls as & $url ) {
42	$url = convert_google_font_to_local_proxy( $url );
43	}
44	return $urls;
45	} );

I think everything is OK but if something goes wrong we can just uncomment this line from /wp-content/wmi/functions.php:

/**
 * Avoid third party resources from www.wikimedia.it
 *
 * https://phabricator.wikimedia.org/T266998
 */
require 'google-font-proxy.php';

Now let's kill:

gstatic.com
webarea.services

Next step:

(Italian) https://wiki.wikimedia.it/wiki/Fornitori/np/Risorse_esterne_form_GIVE

valerio.bozzolan unsubscribed.Jun 8 2021, 10:50 AM

valerio.bozzolan subscribed.

Going to https://www.wikimedia.it/ I still see rel=stylesheet type=text/css href="https://fonts.googleapis.com/css?display=swap&family=Roboto:300,400&subset=latin" media=all> so I'm going to uncheck the first item in the list.

Aklapper added a project: Privacy.Jun 12 2021, 11:10 AM

Aklapper updated the task description. (Show Details)

Aklapper unsubscribed.

In T266998#7153072 wrote:

Going to https://www.wikimedia.it/ I still see rel=stylesheet type=text/css href="https://fonts.googleapis.com/css?display=swap&family=Roboto:300,400&subset=latin" media=all> so I'm going to uncheck the first item in the list.

Probably caused by a recent plugin update. Reported to the appointed company.

OK. It seems the last fonts.googleapis.com was caused by a WordPress plugin called Smart Slider. If you have Smart Slider in your website, do this:

Smart Slider > Settings > Fonts

/wp-admin/admin.php?page=smart-slider3&nextendcontroller=settings&nextendaction=fonts

Then uncheck:

Google - Frontend
Google - Backend

valerio.bozzolan updated the task description. (Show Details)Jun 23 2021, 7:42 AM

Just to say that the mailing list iframe (not handled by us) now does not require anymore Google resources.

More info here:

https://wiki.wikimedia.it/wiki/Fornitori/np/Risorse_esterne_form_GIVE

valerio.bozzolan updated the task description. (Show Details)Mar 19 2022, 11:17 AM

valerio.bozzolan updated the task description. (Show Details)

Facebook is no longer an external resource in https://sostieni.wikimedia.it/ in any way.

The provider still have to replace the Google Fonts. We suggested our endpoint:

valerio.bozzolan updated the task description. (Show Details)Mar 22 2022, 9:26 AM

valerio.bozzolan renamed this task from Avoid third party resources from www.wikimedia.it to Avoid third party resources from *.wikimedia.it websites.Mar 22 2022, 12:06 PM

valerio.bozzolan updated the task description. (Show Details)Mar 24 2022, 11:41 AM

I'm marking it as solved because I can't find any other nonsense external dependency at the moment.

Further problems can be reported also here as usual: