This has to be updated. An issue is e.g. with the INI lexer and the way it treats ; differently from #.

I don't think it should be. The filter property should be allowed, but I think you're concerned about the url() value, which should remain censored.

Also, yes, I did forget to assign this to projects, but it's because I didn't know which projects it should be assigned to.

Not exactly. I am talking about its use in the style attribute on wikitext pages, not on sanitized-css pages.

In T199989#7710169, @Osnard wrote:

It looks like this issue will not occur in newer versions of MediaWiki anymore, due to the switch to ShellBox [1], which explicitly addresses Windows.

Could we still have the change proposed by @Skizzerz [2] be merged into the LTS branch REL1_35?
I have cherry-picked it already [3]. But I had to change occurrences of Command::doPassStdin and Command::doPassStderr, as they do not yet exist in REL1_35. Do you see any issues with this change?

[1] https://github.com/wikimedia/shellbox/blob/3.0.0/src/Command/UnboxedExecutor.php#L150-L167
[2] https://gerrit.wikimedia.org/r/c/mediawiki/core/+/656519/4/includes/shell/Command.php
[3] https://gerrit.wikimedia.org/r/c/mediawiki/core/+/762736/4/includes/shell/Command.php

Thanks for reporting this, however Wikimedia cannot do anything about problems on other websites. Please report problems on that website to the maintainers of that website, so they can fix their broken configuration on their website. Please point them to https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin which has more information how they can fix their broken website.

So yeah. Matma Rex has merged T249860 with this task. Also, I will add details about this task on Wikipedia:VisualEditor.

When I did my first-ever edit on Wikidata, i.e. on Q13517472, the warning that the edit activated the abuse filter 10 had shown normally.

In T240532#5739729, @Lucas_Werkmeister_WMDE wrote:

Fandom uses a fork of a pretty old MediaWiki version (though they’re working on an upgrade), with hundreds of extensions. I suspect the bug is somewhere in there (who knows where exactly), not in current MediaWiki core.

Yes, FANDOM uses an old version of MediaWiki that still has no {{!}} magic word, and an upgrade would cause so much traffic.

In T240532#5738180, @Ammarpad wrote:

I cannot reproduce this. I am also interested in knowing where that colorful box comes from.