In T217775#6498539, @Amire80 wrote:

If I understand correctly, this is probably an upstream issue in Ace editor and CSSLint. I tried reporting it there: https://github.com/CSSLint/csslint/issues/770 .

I bumped the upstream task. It was brought back to top priority, and it finally has an assignee.

I can confirm this happens in my case too. Even on Wikimedia wikis with with safe mode enabled (click this link to test it).

In T391750#10736150, @Chlod wrote:

Upon investigation, this looks like it's happening specifically because of the use of a <gallery> tag.

Just so you know, the mobile version of DiscussionTools does not use any images:

This has to be updated. An issue is e.g. with the INI lexer and the way it treats ; differently from #.

I don't think it should be. The filter property should be allowed, but I think you're concerned about the url() value, which should remain censored.

Also, yes, I did forget to assign this to projects, but it's because I didn't know which projects it should be assigned to.

Not exactly. I am talking about its use in the style attribute on wikitext pages, not on sanitized-css pages.

In T199989#7710169, @Osnard wrote:

It looks like this issue will not occur in newer versions of MediaWiki anymore, due to the switch to ShellBox [1], which explicitly addresses Windows.

Could we still have the change proposed by @Skizzerz [2] be merged into the LTS branch REL1_35?
I have cherry-picked it already [3]. But I had to change occurrences of Command::doPassStdin and Command::doPassStderr, as they do not yet exist in REL1_35. Do you see any issues with this change?

[1] https://github.com/wikimedia/shellbox/blob/3.0.0/src/Command/UnboxedExecutor.php#L150-L167
[2] https://gerrit.wikimedia.org/r/c/mediawiki/core/+/656519/4/includes/shell/Command.php
[3] https://gerrit.wikimedia.org/r/c/mediawiki/core/+/762736/4/includes/shell/Command.php

Thanks for reporting this, however Wikimedia cannot do anything about problems on other websites. Please report problems on that website to the maintainers of that website, so they can fix their broken configuration on their website. Please point them to https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin which has more information how they can fix their broken website.

So yeah. Matma Rex has merged T249860 with this task. Also, I will add details about this task on Wikipedia:VisualEditor.

When I did my first-ever edit on Wikidata, i.e. on Q13517472, the warning that the edit activated the abuse filter 10 had shown normally.

In T240532#5739729, @Lucas_Werkmeister_WMDE wrote:

Fandom uses a fork of a pretty old MediaWiki version (though they’re working on an upgrade), with hundreds of extensions. I suspect the bug is somewhere in there (who knows where exactly), not in current MediaWiki core.

Yes, FANDOM uses an old version of MediaWiki that still has no {{!}} magic word, and an upgrade would cause so much traffic.

In T240532#5738180, @Ammarpad wrote:

I cannot reproduce this. I am also interested in knowing where that colorful box comes from.