FYI, Debian bug 1067578 "New libcairo SVG output in 2.24 is missing" is fixed; Lilypond 2.24.4, the latest stable release of Lilypond, is in Debian unstable ("sid"?) and built with SVG support. The Lilypond Debian package info page indicates the fixed package is not in buster or bookworm.

In T371448#10030460, @Bawolff wrote:

Not all extensions documented on mw.org are installed on mw.org

D'oh! Yup, this would do nothing for those extensions.

T371448 proposes a related but different use for subpages of Special:TrackingCategories, to list only tracking categories matching the given message prefix. It seems the use case here would be better implemented as a Redirecting special page that invokes TrackingCategories.php's resolveTrackingCategory().

In T49578#9912313, @Jonathanischoice wrote:

I submitted gerrit change 1042961 for Extension score, before learning of this task.

Thanks Tim!

4. FWIW this change to TMH makes it ignore the audio tag that Score generates.

diff --git a/resources/ext.tmh.player.js b/resources/ext.tmh.player.js
index adca787f..0ad9e8a6 100644
--- a/resources/ext.tmh.player.js
+++ b/resources/ext.tmh.player.js
@@ -26,7 +26,7 @@ $.fn.loadVideoPlayer = loadVideoPlayer;
  * @private
  */
 function loadVideoPlayers( $content ) {
-       $content.find( 'video, audio' ).loadVideoPlayer();
+       $content.find( 'video, audio.mw-file-element' ).loadVideoPlayer();
 }

This bug's description is obsoleted by cf8a4f2133cb in 2020; Score now directly creates an <audio> tag for its generated mp3 that "just works." I think only if there's other media on the page does TMH JavaScript in ext.tmh.player.js still wrap the Score's audio tag with mw-tmh-player machinery, which is no longer desired behavior for Score audio and triggers bug T363630. As @tstarling comments there

TMH should set its own class attributes on the server side and avoid mangling unrelated content.

I think the added value of TMH's player for audio files is its support for closed captions in the TimedText namespace, but these aren't possible for the generated .mp3 file for Scores with audio.

I mentioned a possible hack workaround in T363630:

ext.tmh.player.element.js's load() bails if a parent of the <audio> tag has class=mw-tmh-player, since "This player has already been transformed". So Score's generateHTML() could add this class to the audio tag and it wouldn't be turned into a TMH player. I tried this in the Firefox debugger and it fixes the bug. Obviously it would be better if TimedMediaHandler and Score cooperated on some explicit attribute that indicates "don't transform this audio/video tag into a TMH player."

It seems what's missing here is a spec for desired behavior, in both the short-term and "ideal world." Should a score with audio use VideoJS or use the browser's <audio> tag implementation? Should it have an info button linking to the raw generated .mp3 file? If the score has lyrics, should they appear as closed captions (I think this would require the score being an external File:). Etc.

Another possible fix:

I guess the player is working as designed.

I think I figured it out. If an audio file has closed captioning in the TimedText namespace (in any language, I think), then playing it will pop up the video player which displays the closed captioning text.

If you add ?useskin=monobook&debug=1 you see the blue progress bar that is obscured in latest default Vector. When I click the broken score player's play button I see jQuery.Deferred exception: title is undefined in Firefox browser console, coming from doPropagation of a requestIdleCallback handler that some module is ready.

Hey folks❣ Another problem with this message: with the new Vector appearance, in a narrow window the language selector can be far from the top. In a 960-pixel wide Firefox window (half my HD screen), the mw-sidebar pushes the title and language links down so that they'res nearly off-screen screen down the page. I saw _Go to top_ and looked at the top for the language selector, but it's near the bottom of the screen along with the title (see screenshot below). Maybe the link text could be "go to page title" or "go to language selector".

I created T287212 while Legoktm was already fixing it 😄

I tried out the long-awaited return of Score on testwiki and it seems good. It's... surprising the OS features you can invoke in Lilypond but I don't understand them enough to seriously attack the Shellbox's sandboxing.

I think this is happening again on some pages on testwiki where the fix for T257066 is under test, e.g. Category:Musical pages and Frankenstein II.. Happens in both Firefox and chromium-browser. What's puzzling is it doesn't happen on all pages using Score, and I can copy the <score> content to another page and sometimes it renders fine. Heisenbug! And on a page that's messed up, a File:somefile.mid TMH player will also appear wrong.

In T49578#3857903 back in 2017, @Ebe123 wrote:

The new -dcrop option will be in the next stable release (2.20), which may be in the next few months.

Hey, thanks for y'all's work on this serious issue 💟 . Some of the disclosed vulnerabilities refer to including SVG and PS files with embedded-ps and embedded-svg commands. I doubt any uses of Extension:Score on WMF wikis use this feature, so could Lilypond gain compile settings to disallow, and not even compile the code for, all such insecure commands?

In T253698#6167755, @bd808 wrote:

What email address do you want attached to your new Developer account @Skierpage?

The usual where Phabricator is already sending these updates: info AT my username/web site (security through obscurity.) No rush, low priority, thanks y'all!

... ancient process...

Nice sleuthing, occasionally an overgrown untended wiki pays off 😉 .

In T253522#6162105, @TheDJ wrote:

The software used for TMH (and most of the media processing) runs on servers that are not the same as those rendering the pages.

Ahh. I wonder if there's some other way to figure out the version on the server, maybe some config file or in WMF's apt repository. Definitely low-priority.

FYI I updated the Score attribute documentation on Extension:Score and English Wikipedia Score Help, mentioning the deprecation of override_midi and override_audio. Editors expressed some concern on their talk pages (no good deed goes unpunished 😄).