Page MenuHomePhabricator

Enable Extension:Widgets on Hindi Wikipedia
Closed, DeclinedPublic


Author: vibhijain

Please enable Extension:Widgets on Hindi Wikipedia. The local consensus is here:विकिपीडिया:New_Extension

Version: unspecified
Severity: enhancement



Related Objects

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 21 2014, 11:38 PM
bzimport set Reference to bz29837.
bzimport added a subscriber: Unknown Object (MLST).

The Widget extension allows execution of arbitrary Smarty template code on the server (therefore arbitrary HTML & client-side JavaScript and arbitrary PHP code on the server, therefore arbitrary Unix executables if you try hard enough). This is not suitable for Wikimedia's security requirements.

Most useful things that can be done this way should be possible with templates (always safe), user/site JavaScript/gadgets (client-side JS code requires either individual user opt-in or an admin to set it up site-wide), or a combination.