On Thu, Jan 12, 2012 at 11:51 AM, Daniel Barrett <d...@vistaprint.com> wrote: > Me: >>> 8. Our MediaWiki:common.js stopped running on the login page. I >>> realize this was a security fix; it just took me by surprise. Fixed by >>> writing a custom extension using the hook UserLoginForm to inject the few >>> lines of JS we needed, and I'm evaluating other non-JS solutions for more >>> security. > > Chad writes: >>This hasn't changed any time recently as far as I can tell...we've had this >>in place for quite awhile. > > Thanks Chad. FYI, MediaWiki:common.js definitely runs on Special:UserLogin in > 1.17.1, the immediately previous release. > DanB >
Hrm...I distinctly remember user's personal JS was disabled on that page. I wonder if ResourceLoader by grouping the JS also ends up disabling it. In either case, it is a security issue and there's not much we can do about it right now. -Chad _______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
