Page MenuHomePhabricator

Archive the OfflineImportLexicon extension
Closed, ResolvedPublicRequest

Description

Reason
Parts of the code have security risks such as unescaped parameters that allow for possible XSS vulnerabilities. The maintainer has not contributed to the code since 2012. Since no one has stepped up to fix this code base and usage seems low, archival is the best route. See more in T309255

To-do list

  • This task
    • Add maintainers of that extension/skin as subscribers to this task (if they have no apparent Phabricator account, notify them on-wiki or via email if possible and note it here).
    • Add Phabricator project OfflineImportLexicon as a tag for this task, and remove MediaWiki-extensions-Other/Other-skins as appropriate.
  • On-wiki documentation
    • Archive documentation on mediawiki.org (https://www.mediawiki.org/wiki/Extension:OfflineImportLexicon): replace page contents with {{Archived extension|4305771|task=T313860}}
    • Update Wikidata item (https://www.wikidata.org/wiki/Q21677845) associated with documentation page
      • add statement Abandonware (Q281039) to instance of (P31) together with qualifier start time (P580) = the YYYY-MM-DD date that you decided to archive extension/skin (generally per edit history)
      • add qualifier end time (P582) = the YYYY-MM-DD (same date as above) to instance of (P31) = MediaWiki extension (Q6805426)
  • Phabricator
    • Mark all Phabricator tasks for the extension/skin either Declined or Invalid. Add a comment pointing to this task when doing so for reference.
    • Archive Phabricator project OfflineImportLexicon for the extension.
    • Edit Phabricator project OfflineImportLexicon description for the extension/skin with a link to this ticket.
  • Translatewiki.net/translations
  • Configuration/tests/integrations/etc.
  • Repositories

Event Timeline

Change 817342 had a related patch set uploaded (by MarcoAurelio; author: MarcoAurelio):

[translatewiki@master] [OfflineImportLexicon] Archive extension

https://gerrit.wikimedia.org/r/817342

Change 817342 merged by jenkins-bot:

[translatewiki@master] [OfflineImportLexicon] Archive extension

https://gerrit.wikimedia.org/r/817342

Mstyles updated the task description. (Show Details)

Change 817897 had a related patch set uploaded (by Mstyles; author: Mstyles):

[integration/config@master] remove OfflineImportLexicon project since it is now archived

https://gerrit.wikimedia.org/r/817897

Change 817897 merged by jenkins-bot:

[integration/config@master] Zuul: [mediawiki/extensions/OfflineImportLexicon] Mark asarchived

https://gerrit.wikimedia.org/r/817897

Change 818168 had a related patch set uploaded (by Mstyles; author: Mstyles):

[mediawiki/extensions@master] removed OfflineImportLexicon due to archival

https://gerrit.wikimedia.org/r/818168

Change 818170 merged by Jforrester:

[mediawiki/extensions/OfflineImportLexicon@master] [ARCHIVED] Updated README to include archival details

https://gerrit.wikimedia.org/r/818170

Change 818168 merged by Zabe:

[mediawiki/extensions@master] removed OfflineImportLexicon due to archival

https://gerrit.wikimedia.org/r/818168

I don't have admin privileges on either phabricator or github to archive the diffusion project or remove the github mirror repo. Everything else is complete!

@Reedy could you archive the diffusion repository? I'm not sure who to reach out to about deleting the github mirror

I've done the GitHub one... It seems I can delete the diffusion repository, but I can't deactivate the Diffusion repo... Needs someone from Diffusion-Repository-Administrators seemingly

Mstyles changed the task status from Open to Stalled.Aug 8 2022, 3:15 PM

waiting on the Diffusion repository to be archived

MarcoAurelio updated the task description. (Show Details)
MarcoAurelio subscribed.

waiting on the Diffusion repository to be archived

Done.