Vgutierrez added a comment.
last BAD_INCOMING_RESPONSE error on cp1075 was a few seconds before deploying
this:
20191122.15h16m44s CONNECT:[0] could not connect [BAD_INCOMING_RESPONSE] to
10.2.2.1 for
VIGNERON created this task.
VIGNERON added a project: Wikidata.
Restricted Application added a subscriber: Aklapper.
TASK DESCRIPTION
Context: on Wikidata, I often correct the capitalization of the label, for
instance replacing "Parc" by "parc". In this case, the size change should be 0
and
gerritbot added a comment.
Change 552660 had a related patch set uploaded (by Brian Wolff; owner: Brian
Wolff):
[wikidata/query/gui@master] Make polestar no longer use inline scripts
https://gerrit.wikimedia.org/r/552660
TASK DETAIL
https://phabricator.wikimedia.org/T238618
EMAIL
Bawolff added a comment.
So revised suggested CSP header:
For everything except in the polestar directory:
default-src 'self' data:;
style-src 'unsafe-inline' data: 'self';
img-src data: 'self' upload.wikimedia.org commons.wikimedia.org;
media-src data: 'self'
Bawolff added a comment.
Polestar also has a button to load datasets from
http://ec2-52-1-38-182.compute-1.amazonaws.com:8753 - which seems a bit suspect
from a privacy policy perspective...
TASK DETAIL
https://phabricator.wikimedia.org/T238618
EMAIL PREFERENCES
gerritbot added a comment.
Change 552656 had a related patch set uploaded (by Brian Wolff; owner: Brian
Wolff):
[wikidata/query/gui@master] Use CORS instead of jsonp for cross domain
requests
https://gerrit.wikimedia.org/r/552656
TASK DETAIL
gerritbot added a comment.
Change 552652 had a related patch set uploaded (by Brian Wolff; owner: Brian
Wolff):
[wikidata/query/gui@master] Split initialization JS of embed.html to separate
file
https://gerrit.wikimedia.org/r/552652
TASK DETAIL
gerritbot added a project: Patch-For-Review.
TASK DETAIL
https://phabricator.wikimedia.org/T238618
EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: gerritbot
Cc: Lucas_Werkmeister_WMDE, Aklapper, Bawolff, Hook696, Daryl-TTMG,
RomaAmorRoma,
Bawolff added a comment.
So if I was ignoring polestar (aka graph builder mode) the ideal CSP would be
something like:
default-src 'self' data:;
style-src 'unsafe-inline' data: 'self';
img-src data: 'self' upload.wikimedia.org commons.wikimedia.org;
media-src data: 'self'
Bawolff added a comment.
So investigating this a bit further:
- embed.html would ideally have its script in a separate file
- Move the current usages of JSONP with www.wikidata.org to CORS
- polestar uses angular, from what I understand, angular can be used to
bypass CSP
TASK DETAIL
So9q added a comment.
What is the ETA of reviews currently?
TASK DETAIL
https://phabricator.wikimedia.org/T233148
EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: So9q
Cc: So9q, Aklapper, WikidataFacts, Hook696, Daryl-TTMG, RomaAmorRoma,
Ankry added a comment.
The current behaviour tends to cause problems and mislead users, see
https://wikisource.org/w/index.php?title=Special:Permalink/765318#Wikipedia_link_from_the_main_page_of_the_Wikisource
(caused by
DannyS712 raised the priority of this task from "Normal" to "Needs Triage".
TASK DETAIL
https://phabricator.wikimedia.org/T239015
EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: DannyS712
Cc: Bencemac, Aklapper, darthmon_wmde, DannyS712, Nandana,
Vandofschool triaged this task as "Normal" priority.
TASK DETAIL
https://phabricator.wikimedia.org/T239015
EMAIL PREFERENCES
https://phabricator.wikimedia.org/settings/panel/emailpreferences/
To: Vandofschool
Cc: Bencemac, Aklapper, darthmon_wmde, DannyS712, Nandana, kostajh, Jony, Lahi,
Bencemac created this task.
Bencemac added projects: Wikidata, MediaWiki-Watchlist.
Restricted Application added a subscriber: Aklapper.
Restricted Application added a project: Growth-Team.
TASK DESCRIPTION
My watchlist on the Hungarian Wikipedia (//Show Wikidata edits in your
watchlist// is
15 matches
Mail list logo
