Hello, per community discussions, I would like to request these following domains to be added to CSP allowlist:
*.ipe.wiki for https://www.ipe.wiki/ (on wiki usage)(solved by T419502)- *.moegirl.org and *.moegirl.org.cn (on wiki usage)
Thanks.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | sbassett | T419265 CSP adjustments related to the 2026 user javascript incident | |||
| Declined | None | T421033 Request for CSP allowance for usage on Chinese Wikipedia |
Event Timeline
Comment Actions
Why would you want these two third-party domains? What is the actual use case? Why can't relevant content be hosted on zh.wikipedia itself?
Comment Actions
Furthermore, I wish to reiterate my concern about allowing CSP access of an external website hosted in and regulated by China (that is, moegirlpedia). I request Trust & Safety's opinion on this.
Comment Actions
The license used by moegirl.org.cn, CC BY-NC-SA 3.0 CN, is incompatible with the CC BY-SA 4.0 license used by Wikimedia projects. Therefore, content cannot be directly transferred unless the original author has specified a more permissive license. (All scripts confirmed to have more permissive licenses are indicated above in the "Migratable?" column under "on wiki usage," along with the corresponding license.)
(I am not aware of the situation at the other site.)
Comment Actions
- *.ipe.wiki for https://www.ipe.wiki/ (on wiki usage)
As far as I'm aware, InPageEdit was meant to have been fixed following T419502: Extensions and some localizations of InPageEdit NEXT are blocked by CSP -- is it still experiencing issues?
Comment Actions
Please could you clarify which previous comments in particular you’re referring to? Mine was only relating to one of the two domains requested here, @SunAfterRain's was in response to your comment (& seems on its face to answer at least one of your questions with regards to the remaining website), & @MilkyDefer requested T&S's opinion on the matter.
Comment Actions
Uhm, thanks. I misread T421033#11746530. I still think though that CSP allowlist entries for APIs on external websites make sense. But not for random other wikis.
Comment Actions
I don't think Moegirlpedia is a random other wiki though. AFAIK it is the most popular MediaWiki instance in China.
Comment Actions
After reviewing the community discussion, and the domains in the list, we don't think this is a compelling case to add to the allowlist. We recommend exploring alternative approaches to hosting content first, as was also raised by community members in that discussion.