h-l [mailto:wikitech-l-boun...@lists.wikimedia.org] On Behalf Of
Daniel Barrett
Sent: Wednesday, December 30, 2015 11:03 AM
To: Wikimedia developers
Subject: Re: [Wikitech-l] The right way to inject user-supplied JavaScript?
Kevin Israel writes:
>Since MediaWiki 1.26, all ResourceLoader modules are
Kevin Israel writes:
>Since MediaWiki 1.26, all ResourceLoader modules are loaded
>asynchronously, so inline scripts now need to account for the
>possibility they may be executed before the jquery and mediawiki modules
>have loaded.
>
>If you use ResourceLoader::makeInlineScript() to build the HTML
> On 29 dec. 2015, at 21:59, Daniel Barrett wrote:
> I also read
> https://www.mediawiki.org/wiki/ResourceLoader/Migration_guide_for_extension_developers
> but did not find an answer.
Hmm, we should really update parts of those guides btw. They not yet take 1.26
into account really.
DJ
s
Hi,
On 12/29/2015 12:59 PM, Daniel Barrett wrote:
> tl;dr: What's the right way for a tag extension to execute JavaScript
> provided by the user? (On a private wiki without Internet access.)
>
> Details:
> I run a private wiki for developers (not accessible from the Internet) that
> lets any w
On 12/29/2015 03:59 PM, Daniel Barrett wrote:
> I run a private wiki for developers (not accessible from the Internet) that
> lets any wiki page author run JavaScript on a page by adding a tag:
>
> alert("hi");
>
> (We understand the security implications, which is why the wiki isn't
> acces
tl;dr: What's the right way for a tag extension to execute JavaScript provided
by the user? (On a private wiki without Internet access.)
Details:
I run a private wiki for developers (not accessible from the Internet) that
lets any wiki page author run JavaScript on a page by adding a tag:
ale