Page MenuHomePhabricator

vec.wikipedia.org main page loads third-party content (due to addThisMain gadget enabled by default)
Closed, ResolvedPublic

Description

This is a privacy violation and must be changed immediately.

https://vec.wikipedia.org/wiki/Wikipedia:Prinsipio loads third-party stuff from addthis.com for everyone visiting the website (logged in or not), due to https://vec.wikipedia.org/wiki/MediaWiki:Gadget-addThisMain.js being set as a default-enabled (!) gadget on https://vec.wikipedia.org/wiki/Speçałe:Preferense#mw-prefsection-gadgets

CC'ing @Fierodelveneto per edit history of https://vec.wikipedia.org/wiki/MediaWiki:Gadgets-definition and as the author of that gadget.

Furthermore, for opt-in, https://vec.wikipedia.org/wiki/Speçałe:Preferense#mw-prefsection-gadgets could say that enabling such gadgets will send your personal data to a third-party.

See also https://vec.wikipedia.org/wiki/MediaWiki:Gadget-addThisArticles.js (but that is at least opt-in).

Event Timeline

Aklapper triaged this task as Unbreak Now! priority.Mar 16 2022, 9:49 AM
Aklapper created this task.
taavi added a subscriber: taavi.

Disabled it by default: https://vec.wikipedia.org/w/index.php?title=MediaWiki:Gadgets-definition&diff=1096413&oldid=1071156. Leaving this task open for any possible follow-ups.

@JFishback_WMF Hi, I left this and other similar tasks open in case the Privacy Engineering team wanted to do any follow-up. Is there still anything that needs to be done or can these tasks be closed?

Thanks @Majavah I think they can be closed. Thanks for jumping on these so quickly!