Page MenuHomePhabricator

Remove Fundraiseup from donatewiki CSP
Closed, ResolvedPublic

Description

The Fundraiseup javascript was removed from donatewiki in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/FundraiserLandingPage/+/1187801

However I noticed we still have the *.fundraiseup.com and fndrsp.net exceptions in the Content Security Policy config: https://noc.wikimedia.org/wiki.php?wiki=donatewiki#wmgApprovedContentSecurityPolicyDomains Those can be removed now

Event Timeline

Change #1211155 had a related patch set uploaded (by Ejegg; author: Ejegg):

[operations/mediawiki-config@master] Remove fundraiseup domains from donatewiki CSP

https://gerrit.wikimedia.org/r/1211155

Ejegg triaged this task as Medium priority.
Ejegg moved this task from Backlog to Being Reviewed on the Fundraising Sprint WWaally hoo board.
Ejegg removed a project: Epic.

Change #1211155 merged by jenkins-bot:

[operations/mediawiki-config@master] Remove fundraiseup domains from donatewiki CSP

https://gerrit.wikimedia.org/r/1211155

Mentioned in SAL (#wikimedia-operations) [2025-11-26T21:39:39Z] <zabe@deploy2002> Started scap sync-world: Backport for [[gerrit:1211155|Remove fundraiseup domains from donatewiki CSP (T410737)]]

Mentioned in SAL (#wikimedia-operations) [2025-11-26T21:42:03Z] <zabe@deploy2002> ejegg, zabe: Backport for [[gerrit:1211155|Remove fundraiseup domains from donatewiki CSP (T410737)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Mentioned in SAL (#wikimedia-operations) [2025-11-26T21:50:14Z] <zabe@deploy2002> Finished scap sync-world: Backport for [[gerrit:1211155|Remove fundraiseup domains from donatewiki CSP (T410737)]] (duration: 10m 34s)

XenoRyet set Final Story Points to 2.