Page MenuHomePhabricator
Create Task
Maniphest T411903

Special:HideBanners request from Thank You page shows warnings in console
Open, Needs TriagePublic
Actions

Description

Load a TY page, e.g. https://thankyou.wikipedia.org/wiki/Thank_You/en in Firefox 140 (or later, probably)

Open the browser tools and check the network for a request to https://en.wikipedia.org/w/index.php?title=Special:HideBanners&category=fundraising&reason=donate

It should load and set a banner hide cookie with reason=donate. Instead it is shown in red and a warning appears in the console: A resource is blocked by OpaqueResponseBlocking, please check browser console for details.

This is what I can find about OpaqueResponseBlocking:
https://github.com/annevk/orb

We may just need to set access-control-allow-origin: * on Special:HideBanners

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
Emit cross-domain headers in Special:HideBannersEjeggmediawiki/extensions/CentralNoticemaster+2 -0
Customize query in gerrit

Event Timeline

Ejegg created this task.Dec 5 2025, 9:03 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 5 2025, 9:03 PM
Ejegg added a comment.Dec 5 2025, 9:08 PM

Looks like we might need to set access-control-allow-origin * headers on the hidebanners img?

Ejegg added a comment.Dec 5 2025, 9:15 PM

Hmm, perhaps it is still setting the cookie though?

Ejegg renamed this task from Special:HideBanners request from ty page is blocked in FF by OpaqueResponseBlocking to Special:HideBanners request from Thank You page shows warnings in console.Dec 8 2025, 5:04 PM
Ejegg added a project: MediaWiki-extensions-CentralNotice.Dec 8 2025, 5:06 PM
Ejegg updated the task description. (Show Details)Dec 8 2025, 8:33 PM
AKanji-WMF moved this task from Triage to Sprint +1 on the Fundraising-Backlog board.Dec 8 2025, 9:19 PM
AKanji-WMF added a project: Fundraising-Tech-Roadmap.Dec 16 2025, 8:45 PM
AKanji-WMF added a project: 25 Dec Q3 Planning.Dec 22 2025, 9:52 PM
gerritbot added a comment.Jan 6 2026, 4:42 PM

Change #1223687 had a related patch set uploaded (by Ejegg; author: Ejegg):

[mediawiki/extensions/CentralNotice@master] Emit cross-domain headers in Special:HideBanners

https://gerrit.wikimedia.org/r/1223687

gerritbot added a project: Patch-For-Review.Jan 6 2026, 4:42 PM
gerritbot added a comment.Jan 7 2026, 12:57 PM

Change #1223687 merged by jenkins-bot:

[mediawiki/extensions/CentralNotice@master] Emit cross-domain headers in Special:HideBanners

https://gerrit.wikimedia.org/r/1223687

Maintenance_bot removed a project: Patch-For-Review.Jan 7 2026, 1:31 PM
Ejegg moved this task from Sprint +1 to Current Sprint on the Fundraising-Backlog board.Jan 16 2026, 6:11 PM
Ejegg added a project: Fundraising Sprint: ARMchair.

Just merged this to wmf_deploy so it should go out on next week's train

Ejegg moved this task from Backlog to Pending Deployment on the Fundraising Sprint: ARMchair board.Jan 16 2026, 6:13 PM
Damilare added a project: Fundraising Sprint: Ball pit.Jan 27 2026, 9:11 PM
Damilare removed a project: Fundraising Sprint: ARMchair.
Ejegg removed a project: Fundraising Sprint: Ball pit.Feb 2 2026, 9:02 PM
Ejegg moved this task from Current Sprint to Unscheduled on the Fundraising-Backlog board.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits