Hi!
User Details
User Details
- User Since
- Oct 25 2014, 1:53 AM (325 w, 6 d)
- Roles
- Administrator
- Availability
- Available
- IRC Nick
- Bawolff
- LDAP User
- Brian Wolff
- MediaWiki User
- Bawolff [ Global Accounts ]
Today
Today
Bawolff added a comment to T272659: TemporaryPasswordPrimaryAuthenticationProvider does not use the language that the request was created in.
Its generally expected that an extension will change the user's language if appropriate. By default the user's language will be the content language not the request language.
Wed, Jan 20
Wed, Jan 20
Bawolff awarded T272238: Elasticsearch and Kibana are switching to non-OSI-approved SSPL licence a Pirate Logo token.
Sun, Jan 3
Sun, Jan 3
Bawolff added a comment to T230415: Stop ignoring paragraph and region separators in DjVu file OCR text layer.
Text layer is generally generated on upload. It used to be refreshable by action=purge but i dont think that is the case anymore. There is a maintenance script to refresh all of a specific file type.
Dec 22 2020
Dec 22 2020
Bawolff awarded T269718: RCE in Widgets extension (CVE-2020-35625) a Mountain of Wealth token.
Bawolff added a comment to T270286: Do a security review of the Widgets extension.
Just FYI, I looked at this a little bit a long time ago. I don't think much has changed, but its possible it has, so this might be out of date, but my main take aways at the time were:
Dec 11 2020
Dec 11 2020
Bawolff added a comment to T263220: Limit concurrency of DPL queries.
Huh. That's not the error i was expecting if the limit was too low. That sounds like something was wrong with poolcounter generally.
Nov 26 2020
Nov 26 2020
Bawolff added a comment to T257301: Create a web demo for phan taint-check.
Nov 25 2020
Nov 25 2020
Bawolff added a comment to T268641: PushToWatch: classic CSRF (CVE-2020-35626).
lgtm, although i have no idea why its stripping non alphabetical characters from the username.
Bawolff awarded T257301: Create a web demo for phan taint-check a Mountain of Wealth token.
Bawolff awarded T268652: Story idea for Blog: Automatic security analysis for PHP code a Love token.
Nov 17 2020
Nov 17 2020
Bawolff added a comment to T263220: Limit concurrency of DPL queries.
Note: A config change is needed in wmf-config before the patch will take affect.
Bawolff changed the visibility for T262240: Burst of connections on ruwikinews (s3).
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
In the interest of transparency and knowledge sharing, can this task be public? AFAICT, there is not private info on here, the traffic wasn't an intentional DOS, and the underlying issue is now fixed.
Nov 10 2020
Nov 10 2020
Bawolff added a comment to T267647: Disable MediaWiki's gzip compression when using apache with HTTP/2.
I don't think it has anything to do with MobileFrontend or Minerva, but yeah probably. There's been about 4 reports I've seen on the support desk, so its not just that one person.
Nov 5 2020
Nov 5 2020
Bawolff added a comment to T266508: PollNY: Stored XSS (CVE-2020-29003).
This looks like it fixes the XSS's properly, as far as that patch goes (I did not look at any of the other PollNY code beyond what was in the patch)
Oct 31 2020
Oct 31 2020
Oct 30 2020
Oct 30 2020
Bawolff added a comment to T266775: Stalls on db1075 (s3) replica db.
I am mostly certain that this was the issue causing db1075 stalls, as processlist has decreased a lot (a slow query can be millions of times more impactful than a regular query).
From a certain point of view, @Urbanecm you made db1075 10x faster, thank you!
Oct 26 2020
Oct 26 2020
Bawolff added a comment to T266425: JsonContent prettification can puts large json pages over the size limit.
So original user is complaining about the JsonConfig.Map content model. In the generic json it looks like prettification comes after the size check, so somehow you can create a page that is bigger than the allowed size
Oct 8 2020
Oct 8 2020
Oct 3 2020
Oct 3 2020
Sep 28 2020
Sep 28 2020
Bawolff added a comment to T255175: Remove LiquidThreads from production.
It’s used by < 9 pages on en.wiktionary, 8 on wikinews , 7 on hu wikipedia, 5 on wikibooks, 0 on sv wikisource. If that low usage is not an indication of an extension that should be removed from production I’m not sure what is.
Sep 26 2020
Sep 26 2020
Bawolff awarded T263842: S5 replication issue, affecting watchlist and probably recentchanges a Evil Spooky Haunted Tree token.
Sep 25 2020
Sep 25 2020
Bawolff awarded T263800: Implement .well-known/change-password redirect on Wikimedia sites a Love token.
Sep 19 2020
Sep 19 2020
Bawolff added a comment to T263220: Limit concurrency of DPL queries.
More specificly its meant to prevent query pileups. The common case of a query pileup in DPL being a template with a dpl on it being used on tens of thousands of pages, all being refreshed at once, which the short cache will eliminate. The pool counter solution as a fall back should eliminate any other situation of DPL query pileup.
Sep 18 2020
Sep 18 2020
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Not sure the bomb metaphor is helpful. There's other features in mediawiki that would also cause problems if subjected to the level of traffic that DPL was subject to in this situation. However there is no doubt that DPL does not meet the performance standards that a new feature would be required to meet today.
Sep 14 2020
Sep 14 2020
Bawolff added a comment to T188109: Please enable DynamicPageList on bd.wikimedia.org.
FWIW, DPL scales roughly linear in the size of the smallest category used in the query (Or in edge cases, the size of the page table). bdwikimedia has 2320 pages total, and seems unlikely to become even an order of magnitude bigger, ever. Performance load of the extension for a wiki of that size is very small.
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
So, my proposal for re-enabling on ruwikinews, would be to do it with the following settings: https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/626919
Sep 12 2020
Sep 12 2020
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
It looks like this will need to be done anyway because Russian Wikinews is in the TOP 100 Wikimedia projects now and we plan to triple the number of articles in the very near future.
Who decides on this issue? What do we need to do?
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
Bawolff added a comment to T261481: Allow bureaucrats to remove sysop permissions on Commons.
FWIW, my personal opinion is we should more evaluate whether the decision has legitimacy in context of the community that made the decision, rather than be a slave to a specific percentage (After all, consensus is not a vote ;). Have any of the oppose people in that discussion or any other prominent contributors to commons expressed a view that the closure was illegitimate? If not, I think we should do this, if they did, then we should re-evaluate the situation. As far as I can tell, this close was not controversial at commons, so I think we should follow it.
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
For context, I can't speak for ruwikinews, but at enwikinews, DPL is considered a business-critical aspect of the software. Removing it would probably be the equivalent to removing say Watchlist from enwiki (a feature which has similar non-ideal performance characteristics)
Sep 10 2020
Sep 10 2020
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
If newsbot is done with its import, it means future refresh to those pages might only be through the job queue. I think job queue has fancy code to monitor db health and adjust speed, although that might only be for replica lag and as far as i understand, a replica being overloaded with queries doesn't actually contribute to replica lag.
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
I made a patch which i believe would reduce risk of this particular type of cache stampede (not sure if that's right word): https://gerrit.wikimedia.org/r/c/mediawiki/extensions/intersection/+/626268/
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
So it seems like what happened, is that NewsBot imported a lot (~100k) articles over a very short time frame, that all had the template {{тема|Материалы PanARMENIAN.Net}} on them. This had a DPL on it that did the category intersection of two categories both with ~100k articles. (To oversimplify) DPL gets slower the bigger the smallest category specified is. Thus this particular DPL was a somewhat slow one. Being somewhat slow by itself was ok, but having 100k articles edited at roughly the same time which all had the same slow DPL on it, was too much for the servers.
Bawolff added a comment to T262240: Burst of connections on ruwikinews (s3).
So summary of what happened
- Newsbot imports a massive number (~100,000) of pages that have {{тема|Материалы PanARMENIAN.Net}} ( link) on them and are in [[category:Материалы PanARMENIAN.Net]] in very short time frame
- This template adds <dynamicpagelist>category = Опубликовано category = Материалы PanARMENIAN.Net notcategory = Не публиковать notcategory = Ожидаемые события по датам notcategory = Архивные новости notcategory=Викиновости коротко count = 18 stablepages = only suppresserrors = true namespace = Main addfirstcategorydate = true ordermethod = created </dynamicpagelist> To these pages. Key point this corresponds to the query above, where Опубликовано is the c1 inner category join, c2 is the Материалы PanARMENIAN.Net inner category join, the LIMIT is 18 (count=18) and the ORDER BY is page_id (ordermethod=created)
- So we now have 100k pages that have to run this kind of inefficient query
- page caching doesn't particularly help, as all these pages are new and have to be rendered at least once
- PoolCounter doesn't help because the query is on many pages (Perhaps one mitigation could be to use the pool counter to limit the max number of things that can make a DPL query at one time, to prevent query pileup)
- The mitigation of changing DPL cache time probably doesn't help, as its unlikely these parses are being triggered by view after parse cache expiry, its probably all initial insert and jobqueue template changes
Bawolff added a comment to T124841: Address performance needs for Wikimedia from DynamicPageList extension so that it can be deployed to further wikis.
Or i guess its not used on enwikinews, other languages might be different.
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Bawolff added a comment to T124841: Address performance needs for Wikimedia from DynamicPageList extension so that it can be deployed to further wikis.
Lastedit isnt commonly used, i mean we should check but probably ok. However the other fields, even if in an index,often cannot effectively be used as an index.
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Which means we have another time bomb on our hands, doesn't imply we should have more time bombs in more places.
Bawolff added a comment to T262391: DPL extension has been disabled on Russian Wikinews.
Where is the technical description of what happened to trigger the removal? This doesn't seem orderly, so i assume something happened here {Edit: I know now]
Sep 5 2020
Sep 5 2020
Bawolff added a comment to T262052: Create a shell script that identifies filters on WMF wikis matching a reg exp pattern.
I tended to do this more from toolforge, so i would download the dblist file first from noc. On prod servers i think its usually located in /srv/mediawiki/dblists, but not 100% sure
Bawolff added a comment to T262052: Create a shell script that identifies filters on WMF wikis matching a reg exp pattern.
I used to use a shell for loop with all.dblist to do these sorts of things (very roughly along the lines of)-
for i in `cat all.dblist` do sql $i -e 'SELECT DATABASE(), foo...';done > output.tsv
Aug 31 2020
Aug 31 2020
Bawolff added a comment to T40417: MediaWiki's anonymous edit token leaves wiki installations (incl. Wikipedia) open to mass anonymous spam we can't block.
Hmm. I think @dbarratt 's idea (checking origin and failing open if not present) could work. Of course should not do it during cors requests. Probably not the safest idea presented, but the other ideas seem locked in a stalemate. Given attacker cannot choose the victims browser in a csrf attack, even if it only works on most browsers that's still a significant reduction of risk.
Bawolff added a comment to T261133: Ban IP edits on pt.wiki.
But this request will only be made if WMF employees; not taking that request, a "violation" of the founding principles
Aug 28 2020
Aug 28 2020
Bawolff added a comment to T259771: RFC: Drop support for older database upgrades.
I often encounter users upgrading from much older versions. At least from ~ 1.16 era.
Bawolff added a comment to T261133: Ban IP edits on pt.wiki.
(i.e., without consensus from the developer community and/or input from the systems administrators),
Aug 27 2020
Aug 27 2020
Bawolff added a comment to T261375: ForeignApiRepo should be configurable as to how long it caches api responses.
Additionally, siteinfo is only cached for 2 hours, and that's something that changes basically never. I think we should default to 1 week for that.
Bawolff added a comment to T190576: Consider to cache again InstantCommons requests by default.
This should probably not be done. I think it would decrease performance by at least 50% on a cache miss (and change nothing on a cache hit). Disabling the cache disables the feature entirely which is a lot faster than simply caching it.
Aug 26 2020
Aug 26 2020
Bawolff added a comment to T261133: Ban IP edits on pt.wiki.
The fact is that allowing unregistered edits is just an unwritten ideal and feature of Wikipedia
Aug 11 2020
Aug 11 2020
Bawolff added a comment to T260016: Request Security check of allowing editing from mirror/fork site.
This is not a security problem, but a social problem. Users should not enter their user credentials from one website into a different website. This applies to Wikipedia, your gmail account and your online banking.
Jul 14 2020
Jul 14 2020
Jul 4 2020
Jul 4 2020
Bawolff updated subscribers of T257102: Mediawiki 1.34.2 tarball incompatible with 7zip on windows due to Pax format.
May 27 2020
May 27 2020
Lens0021 awarded T215713: Missing dependencies in extension snapshots a Like token.
May 25 2020
May 25 2020
Bawolff changed the visibility for T248583: PollNY: Classic CSRF in Special:CreatePoll & Special:UpdatePoll + API module.
This should be fixed now
Bawolff added a comment to T253586: extensions including semantic-forms via composer are broken and breaking extension distributor.
This might be less of an issue in practise, because except when force rebuilding like i did just now, this code path will only be execute if someone commits to the branch in question.
Bawolff added a comment to T253586: extensions including semantic-forms via composer are broken and breaking extension distributor.
At least one of the problematic extensions is SemanticPageSeries and SemanticImageInput
Bawolff added a comment to T215713: Missing dependencies in extension snapshots.
New issue:
Bawolff added a comment to T221887: Ignore css in displaytitle when $wgRestrictDisplayTitle is enabled.
Things like Kalai's 3<span style="position: absolute; top: -9999px;">^</span><sup><i>d</i></sup> conjecture are really interesting though, as that's kind of what this task specifically wants to prevent.
Bawolff added a comment to T221887: Ignore css in displaytitle when $wgRestrictDisplayTitle is enabled.
Everyone talks about user-space, but some mainspace examples:
<span class="texhtml mvar" style="font-style:italic;">e</span> (mathematical constant) <span class="texhtml mvar" style="font-style:italic;">p</span>-group <span class="texhtml mvar" style="font-style:italic;">σ</span>-algebra <i>Pseudotsuga menziesii <span style="font-style:normal;">var.</span> glauca</i> <span lang="mi" style="font-style:normal;" title="Māori language text">Paikea</span> <span class="texhtml mvar" style="font-style:italic;">e</span> (number) <span style="text-decoration:overline;">SOS</span> <i>Lactobacillus delbrueckii <span style="font-style:normal;">subsp.</span> bulgaricus</i> Proof that <span class="texhtml mvar" style="font-style:italic;">e</span> is irrational Proof that 22/7 exceeds <span class="texhtml mvar" style="font-style:italic;">π</span> <span class="texhtml mvar" style="font-style:italic;">π</span>-calculus List of topics related to <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Ulmus minor <span style="font-style:normal;">subsp.</span> minor</i> <i>Sidalcea oregana <span style="font-style:normal;">var.</span> calva</i> <span lang="gd" style="font-style:normal;" title="Scottish Gaelic language text">Bòrd na Gàidhlig</span> <i>Capsicum annuum <span style="font-style:normal;">var.</span> glabriusculum</i> Leibniz formula for <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Argyroxiphium sandwicense <span style="font-style:normal;">subsp.</span> macrocephalum</i> <span class="texhtml mvar" style="font-style:italic;">x̅</span> and R chart <i>S<span style="position:relative"><sup>m</sup><sub style="position:absolute; left:0; bottom:0">n</sub></span></i> theorem <span lang="gd" style="font-style:normal;" title="Scottish Gaelic language text">Corrachadh Mòr</span> <span class="texhtml mvar" style="font-style:italic;">e</span> (constant) ISO-8859-8-<span style="font-family: 'Georgia Pro', Georgia, 'DejaVu Serif', Times, 'Times New Roman', serif;">I</span> <i>Acacia ramulosa <span style="font-style:normal;">var.</span> linophylla</i> <span style="font-family:Cambria">Ƙ</span> List of newspapers that reprinted <i>Jyllands-Posten</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Muhammad cartoons <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 500 Greatest Albums of All Time <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 500 Greatest Songs of All Time Chronology of computation of <span class="texhtml mvar" style="font-style:italic;">π</span> Approximations of <span class="texhtml mvar" style="font-style:italic;">π</span> <span class="texhtml mvar" style="font-style:italic;">n</span>-ary List of formulae involving <span class="texhtml mvar" style="font-style:italic;">π</span> <i>Ulmus davidiana <span style="font-style:normal;">var.</span> japonica</i> <i>Ulmus</i> 'Nanguen' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Lutece</span> <i>Paeonia daurica <span style="font-style:normal;">subsp.</span> mlokosewitschii</i> <i>TV Guide</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 50 Greatest TV Shows of All Time <i>Correa reflexa <span style="font-style:normal;">var.</span> speciosa</i> <i>Ulmus</i> 'Wanoux' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Vada</span> <i>Ampelopsis glandulosa <span style="font-style:normal;">var.</span> brevipedunculata</i> <i>Ulmus</i> 'Morton' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Accolade</span> <i>Ulmus</i> 'Morton Glossy' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Triumph</span> <i>Ulmus</i> 'Morton Plainsman' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Vanguard</span> <i>Ulmus</i> 'Morton Red Tip' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Danada Charm</span> <i>Ulmus</i> 'Morton Stalwart' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Commendation</span> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> integrifolia</i> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> compar</i> <i>Banksia integrifolia <span style="font-style:normal;">subsp.</span> monticola</i> <i>Ulmus minor <span style="font-style:normal;">subsp.</span> canescens</i> <i>Capparis spinosa <span style="font-style:normal;">subsp.</span> nummularia</i> <i>Ulmus parvifolia</i> 'UPMTF' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Bosque</span> <i>Ulmus parvifolia</i> 'Emer II' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Allee</span> <i>Ulmus parvifolia</i> 'A. Ross Central Park' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Central Park Splendor</span> <i>Ulmus parvifolia</i> 'Zettler' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Heritage</span> <i>Ulmus davidiana</i> var. <i>japonica</i> 'JFS-Bieberich' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Emerald Sunshine</span> <i>Ulmus laevis <span style="font-style:normal;">var.</span> celtidea</i> <i>Eriogonum longifolium <span style="font-style:normal;">var.</span> harperi</i> <i>Anadenanthera peregrina <span style="font-style:normal;">var.</span> falcata</i> <i>Anadenanthera colubrina <span style="font-style:normal;">var.</span> cebil</i> <i>Ulmus laciniata <span style="font-style:normal;">var.</span> nikkoensis</i> <i>Ulmus americana <span style="font-style:normal;">var.</span> floridana</i> <i>Ulmus bergmanniana <span style="font-style:normal;">var.</span> bergmanniana</i> <i>Ulmus bergmanniana <span style="font-style:normal;">var.</span> lasiophylla</i> <i>Ulmus changii <span style="font-style:normal;">var.</span> changii</i> <i>Ulmus changii <span style="font-style:normal;">var.</span> kunmingensis</i> <i>Ulmus glaucescens <span style="font-style:normal;">var.</span> glaucescens</i> <i>Ulmus glaucescens <span style="font-style:normal;">var.</span> lasiocarpa</i> <i>Ulmus macrocarpa <span style="font-style:normal;">var.</span> glabra</i> <i>Ulmus macrocarpa <span style="font-style:normal;">var.</span> macrocarpa</i> <i>Ulmus davidiana <span style="font-style:normal;">var.</span> davidiana</i> <i>Ulmus parvifolia <span style="font-style:normal;">var.</span> coreana</i> <i>Coincya monensis <span style="font-style:normal;">subsp.</span> monensis</i> <i>Coincya monensis <span style="font-style:normal;">subsp.</span> recurvata</i> <i>Muehlenbeckia horrida <span style="font-style:normal;">subsp.</span> abdita</i> <i>Parapuzosia <span style="font-style:normal;">(</span>Austiniceras<span style="font-style:normal;">)</span></i> <i>Puzosia <span style="font-style:normal;">(</span>Bhimaites<span style="font-style:normal;">)</span></i> <i>Banksia armata <span style="font-style:normal;">var.</span> armata</i> <i>Banksia armata <span style="font-style:normal;">var.</span> ignicida</i> <i>Olea europaea <span style="font-style:normal;">subsp.</span> cuspidata</i> <i>Ulmus laevis <span style="font-style:normal;">var.</span> simplicidens</i> <i>Yucca gloriosa <span style="font-style:normal;">var.</span> tristis</i> <i>Lilium pardalinum <span style="font-style:normal;">subsp.</span> pitkinense</i> <i>Lupinus latifolius <span style="font-style:normal;">var.</span> barbatus</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> adstringens</i> <i>Acacia ayersiana <span style="font-style:normal;">var.</span> latifolia</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> cupressiformis</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> hemispherica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> indica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> kraussiana</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> nilotica</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> subalata</i> <i>Vachellia nilotica <span style="font-style:normal;">subsp.</span> tomentosa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> aneura</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> argentea</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> fuliginea</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> intermedia</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> macrocarpa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> major</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> microcarpa</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> pilbarana</i> <i>Acacia aneura <span style="font-style:normal;">var.</span> tenuis</i> <i>Anadenanthera peregrina <span style="font-style:normal;">var.</span> peregrina</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> coriacea</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> pendens</i> <i>Acacia coriacea <span style="font-style:normal;">subsp.</span> sericophylla</i> <i>Acaciella angustissima <span style="font-style:normal;">var.</span> suffrutescens</i> <i>Acacia acuminata <span style="font-style:normal;">subsp.</span> acuminata</i> <i>Vachellia aroma <span style="font-style:normal;">var.</span> aroma</i> <i>Vachellia aroma <span style="font-style:normal;">var.</span> huarango</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> caven</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> dehiscens</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> microcarpa</i> <i>Vachellia caven <span style="font-style:normal;">var.</span> stenocarpa</i> <i>Senegalia polyacantha <span style="font-style:normal;">subsp.</span> campylacantha</i> List of <i>Footballers<span class="nowrap" style="padding-left:0.1em;">'</span> Wives</i> characters <i>Banksia laevigata <span style="font-style:normal;">subsp.</span> laevigata</i> <i>Gaeumannomyces graminis <span style="font-style:normal;">var.</span> avenae</i> <i>Gaeumannomyces graminis <span style="font-style:normal;">var.</span> graminis</i> <i>Nectria mammoidea <span style="font-style:normal;">var.</span> rubi</i> List of <i><span class="nowrap" style="padding-left:0.1em;">'</span>Til Death</i> episodes <i>Rhododendron minus <span style="font-style:normal;">var.</span> chapmanii</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> phaseolorum</i> <i>Anadenanthera colubrina <span style="font-style:normal;">var.</span> colubrina</i> <i>Ulmus wallichiana <span style="font-style:normal;">subsp.</span> xanthoderma</i> <i>Ulmus wallichiana <span style="font-style:normal;">subsp.</span> wallichiana</i> <i>Ulmus wallichiana <span style="font-style:normal;">var.</span> tomentosa</i> <i>Uromyces lineolatus <span style="font-style:normal;">subsp.</span> nearcticus</i> <i>Uromyces trifolii-repentis <span style="font-style:normal;">var.</span> fallens</i> <i>Uromyces viciae-fabae <span style="font-style:normal;">var.</span> viciae-fabae</i> <i>Pythium ultimum <span style="font-style:normal;">var.</span> ultimum</i> <i>Podosphaera clandestina <span style="font-style:normal;">var.</span> clandestina</i> <i>Time</i><span class="nowrap" style="padding-left:0.1em;">'</span>s All-Time 100 Movies <i>Geotrichum candidum <span style="font-style:normal;">var.</span> citri-aurantii</i> List of representations of <span class="texhtml mvar" style="font-style:italic;">e</span> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> collina</i> <i>Puccinia extensicola <span style="font-style:normal;">var.</span> hieraciata</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> caulivora</i> <i>Diaporthe phaseolorum <span style="font-style:normal;">var.</span> sojae</i> <i>Puccinia substriata <span style="font-style:normal;">var.</span> indica</i> <i>Uromyces proeminens <span style="font-style:normal;">var.</span> poinsettiae</i> 2<span class="texhtml mvar" style="font-style:italic;">π</span> theorem <i>Mentha longifolia <span style="font-style:normal;">var.</span> asiatica</i> <i>Ulmus parvifolia</i> 'BSNUPF' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Everclear</span> <i>Zapoteca portoricensis <span style="font-style:normal;">subsp.</span> portoricensis</i> Proof that <span class="texhtml mvar" style="font-style:italic;">π</span> is irrational <i>Ficus popenoei <span style="font-style:normal;">subsp.</span> malacocarpa</i> <i>Sambucus racemosa <span style="font-style:normal;">subsp.</span> racemosa</i> <i>Conospermum stoechadis <span style="font-style:normal;">subsp.</span> sclerophyllum</i> <i>Epipactis helleborine <span style="font-style:normal;">var.</span> youngiana</i> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> spinulosa</i> <i>Banksia spinulosa <span style="font-style:normal;">var.</span> cunninghamii</i> <span class="texhtml mvar" style="font-style:italic;">x̅</span> and s chart 10<span style="position:absolute; top: -9999px">^</span><sup>16</sup> to 1 Liu Hui's <span class="texhtml mvar" style="font-style:italic;">π</span> algorithm <i>Portland</i><span style="position:absolute; top: -9999px"> (shipwreck)</span> CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s New England Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Gulf of Mexico Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South Atlantic Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South African Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Indian Ocean Expeditionary Raid CSS <i>Alabama</i><span class="nowrap" style="padding-left:0.1em;">'</span>s South Pacific Expeditionary Raid <span class="texhtml mvar" style="font-style:italic;">n</span>-body problem I am the <span style="font-variant:small-caps">Lord</span> thy God Π<sup>0</sup><sub><span style="margin-left:-0.5em">1</span></sub> class <i>Le Monde</i><span class="nowrap" style="padding-left:0.1em;">'s</span> 100 Books of the Century <span class="music-symbol" style="font-family: Arial Unicode MS, Lucida Sans Unicode;"><span class="music-flat">♭</span></span>VII–V<sup>7</sup> cadence <i>Buddleja crispa</i> 'Huimoon' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Moon Dance</span> <i>Buddleja davidii</i> 'Adokeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Adonis Blue</span> <i>Buddleja davidii</i> 'Camkeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Camberwell Beauty</span> <i>Buddleja</i> 'Minpap' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon</span> <i>Buddleja davidii</i> 'Buddma' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Moonshine</span> <i>Buddleja davidii</i> 'Mongo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho Blue</span> <i>Buddleja davidii</i> 'Monum' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho Purple</span> <i>Buddleja davidii</i> 'Monite' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Nanho White</span> <i>Buddleja davidii</i> 'Notbud' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Masquerade</span> <i>Buddleja davidii</i> 'Courtabud' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Operette</span> <i>Buddleja davidii</i> 'Peakeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Peacock</span> <i>Buddleja davidii</i> 'Pyrkeep' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Purple Emperor</span> <i>Buddleja davidii</i> 'Thia' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Santana</span> <i>Buddleja</i> 'Monrell' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Strawberry Lemonade</span> <i>Buddleja davidii</i> 'Grefoj' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Fourth of July</span> <i>Buddleja</i> 'Podaras4' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Blueberry Cobbler</span> <i>Buddleja</i> 'Podaras5' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Peach Cobbler</span> <i>Buddleja</i> 'Podaras2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Sweet Marmalade</span> <i>Buddleja</i> 'Podaras3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Tangerine Dream</span> <i>Buddleja</i> 'Podaras1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Grande Vanilla</span> <i>Buddleja</i> 'Podaras8' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Blue Heaven</span> <i>Buddleja</i> 'Podaras16' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Pink</span> <i>Buddleja</i> 'Podaras15' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Snow White</span> <i>Buddleja</i> 'Podaras13' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Tutti Fruitti Pink</span> <i>Buddleja</i> 'Lonplum' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Sugar Plum</span> <i>Buddleja</i> 'Morning Mist' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Silver Anniversary</span> <i>Buddleja</i> 'Podaras12' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Flow Lavender</span> <i>Buddleja</i> 'Podaras10' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Dark Pink</span> <i>Buddleja</i> 'Podaras14' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Petite Fuchsia</span> <i>Buddleja</i> 'Podaras11' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Lavender</span> <i>Buddleja</i> 'Podaras7' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Flow Mauve Pink</span> <i>Buddleja</i> 'Podaras6' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Peace</span> <i>Buddleja</i> 'Podaras9' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Flutterby Pink</span> <span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">L</span></span>-Norpseudoephedrine <i>Buddleja</i> 'ILVOargus2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Argus Velvet</span> <i>Buddleja</i> 'ILVOargus1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Argus White</span> <span style="text-transform:lowercase;">london2012.com</span> <span style="text-transform:lowercase;">of</span><span> Verona</span> <i>Buddleja</i> 'Minpap3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon Blue</span> <i>Buddleja</i> 'Minpap2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Reve de Papillon White</span> <i>Buddleja davidii</i> 'Tobuivo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Ivory</span> <i>Buddleja davidii</i> 'Tobudpipur' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Magenta</span> <i>Buddleja davidii</i> 'Tobudviole' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Lavender</span> <i>Buddleja davidii</i> 'Tobuskyblu' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Sky Blue</span> <i>NME</i><span class="nowrap" style="padding-left:0.1em;">'s</span> Cool List <i>Buddleja</i> 'Hinebud 3' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Angel White</span> <i>Buddleja</i> 'Hinebud 1' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Lavender Veil</span> <i>Buddleja</i> 'Hinebud 2' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Purple Splendor</span> Kalai's 3<span style="position: absolute; top: -9999px;">^</span><sup><i>d</i></sup> conjecture <i>Buddleja davidii</i> 'SMBDPB' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Orchid</span> <i>Buddleja davidii</i> 'SMBDPL' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Purple</span> <i>Buddleja davidii</i> 'SMBDVL' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Merry Magic Violet</span> <i>Buddleja davidii</i> 'Harkstead Indigo' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Indigo</span> <i>Buddleja davidii</i> 'Tobudvelve' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Buzz Red</span> <i>Buddleja davidii</i> 'PIIBD-II' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Funky Fuchsia</span> <i>Buddleja davidii</i> 'PIIBD-I' = <span class="trade_designation" style="font-variant:small-caps; margin-left: 0.05em;">Groovy Grape</span> 2-Amino-5-formylamino-6-(5-phospho-<span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">D</span></span>-ribosylamino)pyrimidin-4(3<i>H</i>)-one Zhao Youqin's <span class="texhtml mvar" style="font-style:italic;">π</span> algorithm <span class="texhtml mvar" style="font-style:italic;">x̄</span> and R chart <i>NME</i><span class="nowrap" style="padding-left:0.1em;">'</span>s The 500 Greatest Albums of All Time <span class="smallcaps"><span style="font-variant: small-caps; text-transform: lowercase;">L</span></span>-Photo-leucine <i>The Guardian</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 100 Best Novels Written in English <i>FHM</i><span class="nowrap" style="padding-left:0.1em;">'s</span> 100 Sexiest Women (UK) List of <i>Brunch at Bobby<span class="nowrap" style="padding-left:0.1em;">'</span>s</i> episodes <i>Rolling Stone</i><span class="nowrap" style="padding-left:0.1em;">'</span>s 100 Greatest Songwriters of All Time <i>Radio Times</i><span class="nowrap" style="padding-left:0.1em;">'s</span> Most Powerful People <i>Cahiers du cinéma</i><span class="nowrap" style="padding-left:0.1em;">'</span>s Annual Top 10 Lists <i>Rosa</i> <q style="quotes: "'" "'";">Graham Thomas</q> <i>Rolling Stone Argentina</i><span class="nowrap" style="padding-left:0.1em;">'</span>s The 100 Greatest Albums of National Rock
May 24 2020
May 24 2020
Bawolff added a comment to T215713: Missing dependencies in extension snapshots.
Appears there are two issues:
May 23 2020
May 23 2020
Bawolff added a comment to T248583: PollNY: Classic CSRF in Special:CreatePoll & Special:UpdatePoll + API module.
Looks like you are adding an edit token to the forms, and then checking it when processing it, so this should fix the issue.
May 15 2020
May 15 2020
Bawolff added a comment to T252853: updateSearchIndex.php sql error not all tables locked.
Bawolff updated the task description for T252853: updateSearchIndex.php sql error not all tables locked.
Bawolff renamed T252853: updateSearchIndex.php sql error not all tables locked from updateSearchIndex.php to updateSearchIndex.php sql error not all tables locked.
Bawolff awarded T252811: Requesting +2 rights for Mediawiki Group for DannyS712 a Like token.
May 9 2020
May 9 2020
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
For reference, if you wanted to build this into mediawiki, these sort of things are implemented as subclasses of ApiFormatterBase: https://doc.wikimedia.org/mediawiki-core/master/php/classApiFormatBase.html
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
You can click on the links at https://www.mediawiki.org/w/api.php?action=help&modules=query for examples for different types of queries. As an example, here is a list of my contribs: https://www.mediawiki.org/w/api.php?action=query&list=usercontribs&ucuser=Bawolff&format=json&formatversion=2
Bawolff added a comment to T252291: RFC: Establish a list of gray/grim Wikimedia sites.
Imo, this proposal is inapropriate to a hackathon/phabricator. Its very literally an extremely contentious community social issue and should be discussed through normal community processes on meta
Bawolff added a comment to T248440: Extract CSV file from Wikipedia/Commons/MediaWiki Special pages.
These pages all have json downloads (via api) so i guess is this asking to add csv as an output format for the api?
Apr 7 2020
Apr 7 2020
Bawolff added a comment to T249486: Change Content Security Policy on betacommons to allow api.flickr.com.
CSP is still being tested. Its enforced on beta for testing purposes, in prod it only gives warning on browser developer console
Apr 6 2020
Apr 6 2020
Bawolff added a comment to T249486: Change Content Security Policy on betacommons to allow api.flickr.com.
Note, the flickr thing is part of the uploadwizard extension, not a gadget or anything like that. Most of the other things like that had builtin exceptions, at least in the short term (in the spirit of stabilizing the status quo before changing things)
Bawolff added a comment to T249513: CSP report-uri is deprecated.
Fwiw, deprecated or not all browsers seem to support it and no browser seems to have plans to remove it
Apr 5 2020
Apr 5 2020
Bawolff added a comment to T208188: RFC: Partial opt-out method for Content security policy.
In context of the RFC process, the question is whether the proposed technical solution is satisfactory and feasible in the context of current and anticipated future requirements. The problem seems to be that such requirements are unclear, since there is no clarity on what would be acceptable or desirable behavior from the user's perspective, in the short and medium term.
Apr 4 2020
Apr 4 2020
Bawolff added a comment to T208188: RFC: Partial opt-out method for Content security policy.
Please note, my contract with WMF ended, so I'm not really working on this anymore. The security team will presumably be detailing what the future plans are here. However, I wanted to mention what my thoughts were on this subject at the time when I left.
Bawolff added a comment to T249419: RFC: Render data visualizations on the server.
I think the most complex (and underspecified) aspect here, is data invalidation. Which to be fair, the current solution handles by basically pretending its not a problem. However, graphs can include all sorts of additional resources. These resources aren't even recorded, and there is no cache invalidation when they change. What we do here is probably going to depend a lot on if we continue to pretend this problem doesn't exist, or try to address it.
Bawolff awarded T249419: RFC: Render data visualizations on the server a Love token.
Mar 30 2020
Mar 30 2020
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
There is no phab project for Sofa (nor do i think it really makes sense to create one for my hack side project that doesn't even work yet)
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
For reference, its an experimental idea of making an extension similar to DPL/SMW/Cargo (e.g. User defined query capabilities to generate reports), but have the data model be more like CouchDB.
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
I responded on the ticket, but honestly, I would suggest disabling translations for it, until some future time where the extension actually does something. I'm not actively working on it at the moment, so it may be a while (if ever) that it becomes a usable extension.
Bawolff added a comment to T248849: [Sofa] [[MediaWiki:Sofa-desc/qqq]] translation issue.
Note, this is like a half-done crazy extension idea. There's probably not much point in translating it at this stage.
Mar 29 2020
Mar 29 2020
Bawolff added a comment to T248808: Add CSP policy to installer.
The policy I'm thinking of: default-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'none'; script-src 'self' 'nonce-VnNsWAXz4PjrGZ0kPP5hGvDa'; img-src 'self' data: i.creativecommons.org licensebuttons.net; frame-src creativecommons.org 'self'; base-uri 'none'