I work on the MediaWiki Security Team.
User Details
User Details
- User Since
- Oct 25 2014, 1:53 AM (302 w, 20 h)
- Roles
- Administrator
- Availability
- Available
- IRC Nick
- Bawolff
- LDAP User
- Brian Wolff
- MediaWiki User
- Bawolff [ Global Accounts ]
Tue, Jul 14
Tue, Jul 14
Jul 4 2020
Jul 4 2020
Bawolff updated subscribers of T257102: Mediawiki 1.34.2 tarball incompatible with 7zip on windows due to Pax format.
May 27 2020
May 27 2020
Lens0021 awarded T215713: Missing dependencies in extension snapshots a Like token.
May 25 2020
May 25 2020
Bawolff changed the visibility for T248583: PollNY: Classic CSRF in Special:CreatePoll & Special:UpdatePoll + API module.
This should be fixed now
Bawolff added a comment to T253586: extensions including semantic-forms via composer are broken and breaking extension distributor.
This might be less of an issue in practise, because except when force rebuilding like i did just now, this code path will only be execute if someone commits to the branch in question.
Bawolff added a comment to T253586: extensions including semantic-forms via composer are broken and breaking extension distributor.
At least one of the problematic extensions is SemanticPageSeries and SemanticImageInput
Bawolff added a comment to T215713: Missing dependencies in extension snapshots.
New issue:
Bawolff added a comment to T221887: Ignore css in displaytitle when $wgRestrictDisplayTitle is enabled.
Things like Kalai's 3<span style="position: absolute; top: -9999px;">^</span><sup><i>d</i></sup> conjecture are really interesting though, as that's kind of what this task specifically wants to prevent.
Bawolff added a comment to T221887: Ignore css in displaytitle when $wgRestrictDisplayTitle is enabled.
Everyone talks about user-space, but some mainspace examples:
<span class="texhtml mvar" style="font-style:italic;">e</span> (mathematical constant) <span class="texhtml mvar" style="font-style:italic;">p</span>-group <span class="texhtml mvar" style="font-style:italic;">σ</span>-algebra <i>Pseudotsuga menziesii <span style="font-style:normal;">var.</span> glauca</i> <span lang="mi" style="font-style:normal;" title="Māori language text">Paikea</span> <span class="texhtml mvar" style="font-style:italic;">e</span> (number) <span style="text-decoration:overline;">SOS</span> <i>Lactobacillus delbrueckii <span style="font-style:normal;">subsp.</span> bulgaricus</i> Proof that <span class="texhtml mvar" style="font-style:italic;">e</span> is irrational Proof that 22/7 exceeds <span class="texhtml mvar" style="font-style:italic;">π</span> <span class="texhtml mvar" style="font-style:italic;">π</span>-calculus List of topics related to <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Ulmus minor <span style="font-style:normal;">subsp.</span> minor</i> <i>Sidalcea oregana <span style="font-style:normal;">var.</span> calva</i> <span lang="gd" style="font-style:normal;" title="Scottish Gaelic language text">Bòrd na Gàidhlig</span> <i>Capsicum annuum <span style="font-style:normal;">var.</span> glabriusculum</i> Leibniz formula for <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Argyroxiphium sandwicense <span style="font-style:normal;">subsp.</span> macrocephalum</i> <span class="texhtml mvar" style="font-style:italic;">x̅</span> and R chart <i>S<span style="position:relative"><sup>m</sup><sub style="position:absolute; left:0; bottom:0">n</sub></span></i> theorem <span lang="gd" style="font-style:normal;" title="Scottish Gaelic language text">Corrachadh Mòr</span> <span class="texhtml mvar" style="font-style:italic;">e</span> (constant) ISO-8859-8-<span style="font-family: 'Georgia Pro', Georgia, 'DejaVu Serif', Times, 'Times New Roman', serif;">I</span> <i>Acacia ramulosa <span style="font-style:normal;">var.</span> linophylla</i> <span style="font-family:Cambria">Ƙ</span> List of newspapers that reprinted <i>Jyllands-Posten</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Muhammad cartoons <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 500 Greatest Albums of All Time <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 500 Greatest Songs of All Time Chronology of computation of <span class="texhtml mvar" style="font-style:italic;">π</span> Approximations of <span class="texhtml mvar" style="font-style:italic;">π</span> <span class="texhtml mvar" style="font-style:italic;">n</span>-ary List of formulae involving <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Ulmus davidiana <span style="font-style:normal;">var.</span> japonica</i> <i>Ulmus</i> 'Nanguen' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Lutece</span> <i>Paeonia daurica <span style="font-style:normal;">subsp.</span> mlokosewitschii</i> <i>TV Guide</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 50 Greatest TV Shows of All Time <i>Correa reflexa <span style="font-style:normal;">var.</span> speciosa</i> <i>Ulmus</i> 'Wanoux' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Vada</span> <i>Ampelopsis glandulosa <span style="font-style:normal;">var.</span> brevipedunculata</i> <i>Ulmus</i> 'Morton' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Accolade</span> <i>Ulmus</i> 'Morton Glossy' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Triumph</span> <i>Ulmus</i> 'Morton Plainsman' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Vanguard</span> <i>Ulmus</i> 'Morton Red Tip' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Danada Charm</span> <i>Ulmus</i> 'Morton Stalwart' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Commendation</span> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> integrifolia</i> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> compar</i> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> monticola</i> <i>Ulmus minor <span style="font-style:normal;">subsp.</span> canescens</i> <i>Capparis spinosa <span style="font-style:normal;">subsp.</span> nummularia</i> <i>Ulmus parvifolia</i> 'UPMTF' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Bosque</span> <i>Ulmus parvifolia</i> 'Emer II' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Allee</span> <i>Ulmus parvifolia</i> 'A. Ross Central Park' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Central Park Splendor</span> <i>Ulmus parvifolia</i> 'Zettler' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Heritage</span> <i>Ulmus davidiana</i> var. <i>japonica</i> 'JFS-Bieberich' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Emerald Sunshine</span> <i>Ulmus laevis <span style="font-style:normal;">var.</span> celtidea</i> <i>Eriogonum longifolium <span style="font-style:normal;">var.</span> harperi</i> <i>Anadenanthera peregrina <span style="font-style:normal;">var.</span> falcata</i> <i>Anadenanthera colubrina <span style="font-style:normal;">var.</span> cebil</i> <i>Ulmus laciniata <span style="font-style:normal;">var.</span> nikkoensis</i> <i>Ulmus americana <span style="font-style:normal;">var.</span> floridana</i> <i>Ulmus bergmanniana <span style="font-style:normal;">var.</span> bergmanniana</i> <i>Ulmus bergmanniana <span style="font-style:normal;">var.</span> lasiophylla</i> <i>Ulmus changii <span style="font-style:normal;">var.</span> changii</i> <i>Ulmus changii <span style="font-style:normal;">var.</span> kunmingensis</i> <i>Ulmus glaucescens <span style="font-style:normal;">var.</span> glaucescens</i> <i>Ulmus glaucescens <span style="font-style:normal;">var.</span> lasiocarpa</i> <i>Ulmus macrocarpa <span style="font-style:normal;">var.</span> glabra</i> <i>Ulmus macrocarpa <span style="font-style:normal;">var.</span> macrocarpa</i> <i>Ulmus davidiana <span style="font-style:normal;">var.</span> davidiana</i> <i>Ulmus parvifolia <span style="font-style:normal;">var.</span> coreana</i> <i>Coincya monensis <span style="font-style:normal;">subsp.</span> monensis</i> <i>Coincya monensis <span style="font-style:normal;">subsp.</span> recurvata</i> <i>Muehlenbeckia horrida <span style="font-style:normal;">subsp.</span> abdita</i> <i>Parapuzosia <span style="font-style:normal;">(</span>Austiniceras<span style="font-style:normal;">)</span></i> <i>Puzosia <span style="font-style:normal;">(</span>Bhimaites<span style="font-style:normal;">)</span></i> <i>Banksia armata <span style="font-style:normal;">var.</span> armata</i> <i>Banksia armata <span style="font-style:normal;">var.</span> ignicida</i> <i>Olea europaea <span style="font-style:normal;">subsp.</span> cuspidata</i> <i>Ulmus laevis <span style="font-style:normal;">var.</span> simplicidens</i> <i>Yucca gloriosa <span style="font-style:normal;">var.</span> tristis</i> <i>Lilium pardalinum <span style="font-style:normal;">subsp.</span> pitkinense</i> <i>Lupinus latifolius <span style="font-style:normal;">var.</span> barbatus</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> adstringens</i> <i>Acacia ayersiana <span style="font-style:normal;">var.</span> latifolia</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> cupressiformis</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> hemispherica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> indica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> kraussiana</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> nilotica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> subalata</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> tomentosa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> aneura</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> argentea</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> fuliginea</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> intermedia</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> macrocarpa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> major</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> microcarpa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> pilbarana</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> tenuis</i> <i>Anadenanthera peregrina <span style="font-style:normal;">var.</span> peregrina</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> coriacea</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> pendens</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> sericophylla</i> <i>Acaciella angustissima <span style="font-style:normal;">var.</span> suffrutescens</i> <i>Acacia acuminata <span style="font-style:normal;">subsp.</span> acuminata</i> <i>Vachellia aroma <span style="font-style:normal;">var.</span> aroma</i> <i>Vachellia aroma <span style="font-style:normal;">var.</span> huarango</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> caven</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> dehiscens</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> microcarpa</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> stenocarpa</i> <i>Senegalia polyacantha <span style="font-style:normal;">subsp.</span> campylacantha</i> List of <i>Footballers<span class="nowrap" style="padding-left:0.1em;">'</span> Wives</i> characters <i>Banksia laevigata <span style="font-style:normal;">subsp.</span> laevigata</i> <i>Gaeumannomyces graminis <span style="font-style:normal;">var.</span> avenae</i> <i>Gaeumannomyces graminis <span style="font-style:normal;">var.</span> graminis</i> <i>Nectria mammoidea <span style="font-style:normal;">var.</span> rubi</i> List of <i><span class="nowrap" style="padding-left:0.1em;">'</span>Til Death</i> episodes <i>Rhododendron minus <span style="font-style:normal;">var.</span> chapmanii</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> phaseolorum</i> <i>Anadenanthera colubrina <span style="font-style:normal;">var.</span> colubrina</i> <i>Ulmus wallichiana <span style="font-style:normal;">subsp.</span> xanthoderma</i> <i>Ulmus wallichiana <span style="font-style:normal;">subsp.</span> wallichiana</i> <i>Ulmus wallichiana <span style="font-style:normal;">var.</span> tomentosa</i> <i>Uromyces lineolatus <span style="font-style:normal;">subsp.</span> nearcticus</i> <i>Uromyces trifolii-repentis <span style="font-style:normal;">var.</span> fallens</i> <i>Uromyces viciae-fabae <span style="font-style:normal;">var.</span> viciae-fabae</i> <i>Pythium ultimum <span style="font-style:normal;">var.</span> ultimum</i> <i>Podosphaera clandestina <span style="font-style:normal;">var.</span> clandestina</i> <i>Time</i><span class="nowrap" style="padding-left:0.1em;">'</span>s All-Time 100 Movies <i>Geotrichum candidum <span style="font-style:normal;">var.</span> citri-aurantii</i> List of representations of <span class="texhtml mvar" style="font-style:italic;">e</span> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> collina</i> <i>Puccinia extensicola <span style="font-style:normal;">var.</span> hieraciata</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> caulivora</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> sojae</i> <i>Puccinia substriata <span style="font-style:normal;">var.</span> indica</i> <i>Uromyces proeminens <span style="font-style:normal;">var.</span> poinsettiae</i> 2<span class="texhtml mvar" style="font-style:italic;">π</span> theorem <i>Mentha longifolia <span style="font-style:normal;">var.</span> asiatica</i> <i>Ulmus parvifolia</i> 'BSNUPF' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Everclear</span> <i>Zapoteca portoricensis <span style="font-style:normal;">subsp.</span> portoricensis</i> Proof that <span class="texhtml mvar" style="font-style:italic;">π</span> is irrational <i>Ficus popenoei <span style="font-style:normal;">subsp.</span> malacocarpa</i> <i>Sambucus racemosa <span style="font-style:normal;">subsp.</span> racemosa</i> <i>Conospermum stoechadis <span style="font-style:normal;">subsp.</span> sclerophyllum</i> <i>Epipactis helleborine <span style="font-style:normal;">var.</span> youngiana</i> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> spinulosa</i> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> cunninghamii</i> <span class="texhtml mvar" style="font-style:italic;">x̅</span> and s chart 10<span style="position:absolute; top: -9999px">^</span><sup>16</sup> to 1 Liu Hui's <span class="texhtml mvar" style="font-style:italic;">π</span> algorithm <i>Portland</i><span style="position:absolute; top: -9999px"> (shipwreck)</span> CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s New England Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Gulf of Mexico Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South Atlantic Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South African Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Indian Ocean Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South Pacific Expeditionary Raid <span class="texhtml mvar" style="font-style:italic;">n</span>-body problem I am the <span style="font-variant:small-caps">Lord</span> thy God Π<sup>0</sup><sub><span style="margin-left:-0.5em">1</span></sub> class <i>Le Monde</i><span class="nowrap" style="padding-left:0.1em;">'s</span> 100 Books of the Century <span class="music-symbol" style="font-family: Arial Unicode MS, Lucida Sans Unicode;"><span class="music-flat">♭</span></span>VII–V<sup>7</sup> cadence <i>Buddleja crispa</i> 'Huimoon' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Moon Dance</span> <i>Buddleja davidii</i> 'Adokeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Adonis Blue</span> <i>Buddleja davidii</i> 'Camkeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Camberwell Beauty</span> <i>Buddleja</i> 'Minpap' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon</span> <i>Buddleja davidii</i> 'Buddma' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Moonshine</span> <i>Buddleja davidii</i> 'Mongo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho Blue</span> <i>Buddleja davidii</i> 'Monum' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho Purple</span> <i>Buddleja davidii</i> 'Monite' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho White</span> <i>Buddleja davidii</i> 'Notbud' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Masquerade</span> <i>Buddleja davidii</i> 'Courtabud' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Operette</span> <i>Buddleja davidii</i> 'Peakeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Peacock</span> <i>Buddleja davidii</i> 'Pyrkeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Purple Emperor</span> <i>Buddleja davidii</i> 'Thia' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Santana</span> <i>Buddleja</i> 'Monrell' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Strawberry Lemonade</span> <i>Buddleja davidii</i> 'Grefoj' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Fourth of July</span> <i>Buddleja</i> 'Podaras4' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Blueberry Cobbler</span> <i>Buddleja</i> 'Podaras5' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Peach Cobbler</span> <i>Buddleja</i> 'Podaras2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Sweet Marmalade</span> <i>Buddleja</i> 'Podaras3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Tangerine Dream</span> <i>Buddleja</i> 'Podaras1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Vanilla</span> <i>Buddleja</i> 'Podaras8' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Blue Heaven</span> <i>Buddleja</i> 'Podaras16' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Pink</span> <i>Buddleja</i> 'Podaras15' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Snow White</span> <i>Buddleja</i> 'Podaras13' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Tutti Fruitti Pink</span> <i>Buddleja</i> 'Lonplum' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Sugar Plum</span> <i>Buddleja</i> 'Morning Mist' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Silver Anniversary</span> <i>Buddleja</i> 'Podaras12' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Flow Lavender</span> <i>Buddleja</i> 'Podaras10' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Dark Pink</span> <i>Buddleja</i> 'Podaras14' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Fuchsia</span> <i>Buddleja</i> 'Podaras11' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Lavender</span> <i>Buddleja</i> 'Podaras7' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Flow Mauve Pink</span> <i>Buddleja</i> 'Podaras6' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Peace</span> <i>Buddleja</i> 'Podaras9' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Pink</span> <span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">L</span></span>-Norpseudoephedrine <i>Buddleja</i> 'ILVOargus2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Argus Velvet</span> <i>Buddleja</i> 'ILVOargus1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Argus White</span> <span style="text-transform:lowercase;">london2012.com</span> <span style="text-transform:lowercase;">of</span><span> Verona</span> <i>Buddleja</i> 'Minpap3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon Blue</span> <i>Buddleja</i> 'Minpap2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon White</span> <i>Buddleja davidii</i> 'Tobuivo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Ivory</span> <i>Buddleja davidii</i> 'Tobudpipur' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Magenta</span> <i>Buddleja davidii</i> 'Tobudviole' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Lavender</span> <i>Buddleja davidii</i> 'Tobuskyblu' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Sky Blue</span> <i>NME</i><span class="nowrap" style="padding-left:0.1em;">'s</span> Cool List <i>Buddleja</i> 'Hinebud 3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Angel White</span> <i>Buddleja</i> 'Hinebud 1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Lavender Veil</span> <i>Buddleja</i> 'Hinebud 2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Purple Splendor</span> Kalai's 3<span style="position: absolute; top: -9999px;">^</span><sup><i>d</i></sup> conjecture <i>Buddleja davidii</i> 'SMBDPB' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Orchid</span> <i>Buddleja davidii</i> 'SMBDPL' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Purple</span> <i>Buddleja davidii</i> 'SMBDVL' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Violet</span> <i>Buddleja davidii</i> 'Harkstead Indigo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Indigo</span> <i>Buddleja davidii</i> 'Tobudvelve' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Red</span> <i>Buddleja davidii</i> 'PIIBD-II' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Funky Fuchsia</span> <i>Buddleja davidii</i> 'PIIBD-I' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Groovy Grape</span> 2-Amino-5-formylamino-6-(5-phospho-<span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">D</span></span>-ribosylamino)pyrimidin-4(3<i>H</i>)-one Zhao Youqin's <span class="texhtml mvar" style="font-style:italic;">π</span> algorithm <span class="texhtml mvar" style="font-style:italic;">x̄</span> and R chart <i>NME</i><span class="nowrap" style="padding-left:0.1em;">'</span>s The 500 Greatest Albums of All Time <span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">L</span></span>-Photo-leucine <i>The Guardian</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 100 Best Novels Written in English <i>FHM</i><span class="nowrap" style="padding-left:0.1em;">'s</span> 100 Sexiest Women (UK) List of <i>Brunch at Bobby<span class="nowrap" style="padding-left:0.1em;">'</span>s</i> episodes <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 100 Greatest Songwriters of All Time <i>Radio Times</i><span class="nowrap" style="padding-left:0.1em;">'s</span> Most Powerful People <i>Cahiers du cinéma</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Annual Top 10 Lists <i>Rosa</i> <q style="quotes: "'" "'";">Graham Thomas</q> <i>Rolling Stone Argentina</i><span class="nowrap" style="padding-left:0.1em;">'</span>s The 100 Greatest Albums of National Rock
May 24 2020
May 24 2020
Bawolff added a comment to T215713: Missing dependencies in extension snapshots.
Appears there are two issues:
May 23 2020
May 23 2020
Bawolff added a comment to T248583: PollNY: Classic CSRF in Special:CreatePoll & Special:UpdatePoll + API module.
Looks like you are adding an edit token to the forms, and then checking it when processing it, so this should fix the issue.
May 15 2020
May 15 2020
Bawolff added a comment to T252853: updateSearchIndex.php sql error not all tables locked.
Bawolff updated the task description for T252853: updateSearchIndex.php sql error not all tables locked.
Bawolff renamed T252853: updateSearchIndex.php sql error not all tables locked from updateSearchIndex.php to updateSearchIndex.php sql error not all tables locked.
Bawolff awarded T252811: Requesting +2 rights for Mediawiki Group for DannyS712 a Like token.
May 9 2020
May 9 2020
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
For reference, if you wanted to build this into mediawiki, these sort of things are implemented as subclasses of ApiFormatterBase: https://doc.wikimedia.org/mediawiki-core/master/php/classApiFormatBase.html
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
You can click on the links at https://www.mediawiki.org/w/api.php?action=help&modules=query for examples for different types of queries. As an example, here is a list of my contribs: https://www.mediawiki.org/w/api.php?action=query&list=usercontribs&ucuser=Bawolff&format=json&formatversion=2
Bawolff added a comment to T252291: RFC: Establish a list of gray/grim Wikimedia sites.
Imo, this proposal is inapropriate to a hackathon/phabricator. Its very literally an extremely contentious community social issue and should be discussed through normal community processes on meta
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
These pages all have json downloads (via api) so i guess is this asking to add csv as an output format for the api?
Apr 7 2020
Apr 7 2020
Bawolff added a comment to T249486: Change Content Security Policy on betacommons to allow api.flickr.com.
CSP is still being tested. Its enforced on beta for testing purposes, in prod it only gives warning on browser developer console
Apr 6 2020
Apr 6 2020
Bawolff added a comment to T249486: Change Content Security Policy on betacommons to allow api.flickr.com.
Note, the flickr thing is part of the uploadwizard extension, not a gadget or anything like that. Most of the other things like that had builtin exceptions, at least in the short term (in the spirit of stabilizing the status quo before changing things)
Bawolff added a comment to T249513: CSP report-uri is deprecated.
Fwiw, deprecated or not all browsers seem to support it and no browser seems to have plans to remove it
Apr 5 2020
Apr 5 2020
Bawolff added a comment to T208188: RFC: Partial opt-out method for Content security policy.
In context of the RFC process, the question is whether the proposed technical solution is satisfactory and feasible in the context of current and anticipated future requirements. The problem seems to be that such requirements are unclear, since there is no clarity on what would be acceptable or desirable behavior from the user's perspective, in the short and medium term.
Apr 4 2020
Apr 4 2020
Bawolff added a comment to T208188: RFC: Partial opt-out method for Content security policy.
Please note, my contract with WMF ended, so I'm not really working on this anymore. The security team will presumably be detailing what the future plans are here. However, I wanted to mention what my thoughts were on this subject at the time when I left.
Bawolff added a comment to T249419: RFC: Render data visualizations on the server.
I think the most complex (and underspecified) aspect here, is data invalidation. Which to be fair, the current solution handles by basically pretending its not a problem. However, graphs can include all sorts of additional resources. These resources aren't even recorded, and there is no cache invalidation when they change. What we do here is probably going to depend a lot on if we continue to pretend this problem doesn't exist, or try to address it.
Bawolff awarded T249419: RFC: Render data visualizations on the server a Love token.
Mar 30 2020
Mar 30 2020
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
There is no phab project for Sofa (nor do i think it really makes sense to create one for my hack side project that doesn't even work yet)
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
For reference, its an experimental idea of making an extension similar to DPL/SMW/Cargo (e.g. User defined query capabilities to generate reports), but have the data model be more like CouchDB.
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
I responded on the ticket, but honestly, I would suggest disabling translations for it, until some future time where the extension actually does something. I'm not actively working on it at the moment, so it may be a while (if ever) that it becomes a usable extension.
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
Note, this is like a half-done crazy extension idea. There's probably not much point in translating it at this stage.
Mar 29 2020
Mar 29 2020
Bawolff added a comment to T248808: Add CSP policy to installer.
The policy I'm thinking of: default-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'nonce-VnNsWAXz4PjrGZ0kPP5hGvDa'; img-src 'self' data: i.creativecommons.org licensebuttons.net; frame-src creativecommons.org 'self'; base-uri 'none'
Bawolff added a comment to T248783: graphoid output looks blurry.
No, I think there should be no poor-image in the end at all but a "true"
graph (ie interactive, tooltipable, etc).
Bawolff added a comment to T236892: Communicate transition of Graph/Graphoid to client-side only JavaScript feature.
Bawolff added a comment to T243462: Archive the FormPreloadPostCache extension.
Mar 28 2020
Mar 28 2020
Bawolff added a comment to T248707: Improve the functionality of maps on COVID 19 Wikipedia articles to better describe the spread.
@Aklapper thanks, I'm sorry if the summary is incorrect, the bullet points are the things that are needed, please feel free to change the summary. I don't know who could answer T248707#6007650 and T248707#6007601 , me and James can't, who could we ask?
Bawolff added a comment to T248707: Improve the functionality of maps on COVID 19 Wikipedia articles to better describe the spread.
With the exception of the gear thing, its not obvious to me that any of this is not already possible (taking this from the point of view that its a feature request for graph extension, and not a support request. However from context i think its pretty clear its primarily the latter.)
Bawolff added a comment to T243933: MediaWiki 1.34.0 could not be updated with wikimedia/css-sanitizer: 2.0.1.
So this bug should either be merged into T219832 or maybe marked invalid.
Bawolff added a comment to T243933: MediaWiki 1.34.0 could not be updated with wikimedia/css-sanitizer: 2.0.1.
Steps to Reproduce:
composer require wikimedia/css-sanitizer
Mar 26 2020
Mar 26 2020
Bawolff added a comment to T247406: Proposal: InstantCommons improvements.
Bawolff added a comment to T247733: Very minor XSS in mobile page content service.
Just a side note: I believe escaping the content can solve the security problem but it doesn't look like it has the desired behavior:
We probably need a sanitization library here.
Bawolff added a comment to T248294: Separate permission for creating a page with a custom content model.
As an additional use case I literally just ran into - You can only test templatestyles in your user-space (sanitized-css content model) on enwiki if you're an admin, which is a giant pain.
Bawolff awarded T248294: Separate permission for creating a page with a custom content model a Love token.
Mar 24 2020
Mar 24 2020
Bawolff added a comment to T26575: Purge Category and File description pages from HTTP/File cache when members/usage changes via LinkUpdate.
So right now, we're already updating page_touched for these pages, just not clearing them in varnish.
Mar 23 2020
Mar 23 2020
Bawolff added a comment to T244124: Make CSP enforce on beta cluster.
Ok, one additional report in the logs of m.wikidata.beta.wmflabs.org being blocked.
Bawolff added a comment to T248130: Add CSP header to techblog.wikimedia.org to block 3rd party assets.
If you wanted to, you could probably use the prod collector if you want (It just logs to logstash)
Bawolff moved T245658: .mp4 build artifacts not viewable due to CSP in Chrome from Backlog to misc services on the ContentSecurityPolicy board.
Bawolff moved T248130: Add CSP header to techblog.wikimedia.org to block 3rd party assets from Backlog to misc services on the ContentSecurityPolicy board.
Bawolff added a comment to T248277: Enable FlaggedRevs for NS "MediaWiki" and "File" of ruwikisource.
I nonetheless think we should be very cautious enabling FlaggedRevs in NS_MEDIAWIKI.
Mar 22 2020
Mar 22 2020
Bawolff added a comment to T248277: Enable FlaggedRevs for NS "MediaWiki" and "File" of ruwikisource.
I would be very cautious about enabling FlaggedRevs for NS_MEDIAWIKI.
Bawolff edited projects for T248274: Sometimes requests on beta cluster are made to http://eventgate-logging.wmflabs.org without TLS, added: MediaWiki-extensions-WikimediaEvents; removed Sentry.
As pointed out by @Krenair, this is actually WikimediaEvents not Sentry
Bawolff added a comment to T244124: Make CSP enforce on beta cluster.
Bawolff added a comment to T208197: ContentTranslation relies on recommendation-api running on Cloud VPS.
Have recommendation api to be included in the whitelist (need to determine how)
Bawolff added a comment to T244124: Make CSP enforce on beta cluster.
Ok, so looking at the results, it seems like the only thing that is generating reports (that is unexpected) are:
Bawolff awarded T248130: Add CSP header to techblog.wikimedia.org to block 3rd party assets a Love token.
Mar 20 2020
Mar 20 2020
Bawolff added a comment to T245658: .mp4 build artifacts not viewable due to CSP in Chrome.
For reference, I don't think there is any risk of the new policy:
- media-src 'self' allows playing <video> elements to play files from the same domain. On some browsers that implement viewing a media file by generating a fake page with a <video> element on it, this allows viewing the media files directly. There is basically no risk of playing a video file from the same domain. At worst playing video files could be used as a very poor data-exfiltration method by changing cache status and whatnot, which doesn't sound like a credible risk in jenkins, and is reduced by only allowing same domain files.
- style-src 'unsafe-inline' allows inline style attributes, and <style> tags on pages (helpful for T215115). The potential risk around allowing this is generally two things. First of all in certain situations it can be used to aid in phising. This seems inapllicable to jenkins. Secondly, it can be used as a data exfiltration method (e.g. Setting a background-image based on the value of an attribute. Having an unclosed url() token in a style sheet that eats the closing </style> tag and includes part of the page in the url being fetched, etc). This does not seem like a credible risk in the context of jenkins.
Bawolff added a comment to T245658: .mp4 build artifacts not viewable due to CSP in Chrome.
So i would suggest something like:
Bawolff added a comment to T245658: .mp4 build artifacts not viewable due to CSP in Chrome.
Bawolff added a comment to T248147: Wikimedia\Rdbms\Database::normalizeUpsertKeys called with deprecated parameter style: the unique key array should be a string or array of string arrays generating 2 million warnings in 24 hours.
Probably from 13b11a946ea
Mar 19 2020
Mar 19 2020
Bawolff added a comment to T247910: MediaWiki should allow setting tabindex="0" on elements in wikitext.
@cscott thank you!
Bawolff added a comment to T247566: Broken section edit links styles on Vector.
So this seems to be affecting group0 wikis and generating complaints. Patch should probably be backported and deployed rather urgently
Bawolff placed T141185: Better error handing for js list editor up for grabs.
Bawolff placed T149037: CollaborationList: add visual editing mode up for grabs.
Bawolff placed T149043: CollaborationList: add js tools for managing columns up for grabs.
Bawolff placed T141015: Add support for re-arranging features via drag and drop up for grabs.
Mar 18 2020
Mar 18 2020
Bawolff added a comment to T247747: mobile-apps XSS when using api/rest_v1/page/mobile-html on zh wiki, with id attribute in header.
The web browser was what i was primarily think of, because its in the same domain as wikipedia, so you could use it to take over accounts (on any language since all the projects are connected) [the PoC i made above requires user interaction but you should be able to do it without user interaction beyond loading the page, as < is allowed in id attributes]. Just trick a user into viewing that link, or have your third party attack website open it in iframe/popup/etc
Bawolff updated subscribers of T247078: Main pages of several Beta Cluster wikis redirect to other production wikis (MessageCache keyspace is same for all wikis causing conflicts).
@Krinkle 's patch at https://gerrit.wikimedia.org/r/580577 should fix this
Bawolff added a comment to T247562: Warning: Memcached::setMulti(): failed to set key global:segment:....
This is also causing T247078
Bawolff added a comment to T247910: MediaWiki should allow setting tabindex="0" on elements in wikitext.
@Volker_E Does only allowing tabindex=0 (but not -1 or positive numbers) in wikitext make sense do you think? Or do you think we should also allow -1?
Mar 17 2020
Mar 17 2020
Bawolff added a comment to T247702: Format table in coronavirus article.
So one issue here, is that MediaWiki bans the tabindex attribute, which for accessibility reasons is reccomended on scrollable elements.
Bawolff added a comment to T247702: Format table in coronavirus article.
The prod version of the app has bundled CSS on iOS and legacy upstream CSS on Android.
Bawolff added a comment to T247703: Help with surfacing coronavirus info in "in the news" on enwiki.
Can we geolocate content on this page?
Bawolff renamed T247078: Main pages of several Beta Cluster wikis redirect to other production wikis (MessageCache keyspace is same for all wikis causing conflicts) from Main pages of several Beta Cluster wikis redirect to other production wikis to Main pages of several Beta Cluster wikis redirect to other production wikis (MessageCache keyspace is same for all wikis causing conflicts).
Bawolff updated subscribers of T247078: Main pages of several Beta Cluster wikis redirect to other production wikis (MessageCache keyspace is same for all wikis causing conflicts).
So it looks like what is happening:
Bawolff added a comment to T246901: Support full colour 3D models on Wikimedia projects.
Bawolff added a comment to T247702: Format table in coronavirus article.
Bawolff added a comment to T247702: Format table in coronavirus article.
doesn't work because of T111565
Bawolff added a comment to T247702: Format table in coronavirus article.