[01:19:12] I found a interesting bug in 1.26.2 -- if somehow a extension uploads a file with slashes [01:19:35] mediawiki gets very angry and wont register the file exists, but it has been uploaded [01:20:17] and will sometimes urlencode the filename breaking it. as it writes.... wait I wonder if I can write a file somewhere else out of root using this (this is the html2wiki extension [01:20:40] since it makes a /images/c/cc/path/to/file/that/was/in/the/zip [01:23:40] jrwr: please file a task in phabricator [01:25:12] The big question is, how did this go unnoticed. it breaks image uploads in html2wiki outright [01:25:21] and hell nuke can't even delete the files [01:25:26] this breaks the wiki [01:26:14] oh and you can write out of the directory [01:26:40] I was able to write to /tmp/ by using a ../../../../../../ type url [01:27:01] #Rekt, guess I need to fix the slashes in html2wiki [09:08:02] hi, where exactly is the height or padding of the default vector skin defined? ANd can I change it? I have a skin made that is using the Vector skin as background. But well it looks kinda weird because the standard menu items and so on are way to much inside the image. https://img.aebian.org/chrome_2016-05-04_11-07-21.jpg [09:20:17] https://phabricator.wikimedia.org/diffusion/SVEC/ [09:20:38] Your web browser's Developer Tools can help you find the exact place and exact file. [09:22:52] I already fpund it but thanks ^^ [10:42:07] Hi all. Is there a way I can add another section next to the 'Discussion'? I'd like to add another page associated to the wiki. How do I do that? [13:25:50] morning [17:46:23] i need a parser function that will parse its argument(s) to html and return the result as text (i.e. not as a strip token), so that the parent function can use the html [17:46:52] the only way I found so far is by running a new parser, but that screws with the parsing environment, so it's not really a solution [17:50:46] i.e. I want to be able to use something like {{#fn:{{#parse:[[foo|bar]]}} }} and #fn gets bar as its argument [18:02:46] gwicke: is there a simple way to turn the result of frame->expand into final HTML? [18:02:51] (also, hi! LTNS) [18:29:18] zozocky: i think that's disallowed for security reasons. it could be abused to harvest replay/undo tokens from history pages, something like that. [18:34:11] cscott: i'm doing this on private wikis, so that's not a concern [18:42:53] sure, i'm just saying you're unlikely to find this as a prebuilt function in stock mediawiki [18:42:53] and, actually, doing so is a little awkward due to the multipass nature of the php parser. "running a new parser" sounds like the way to go, maybe you can just initialize its environment better. [18:46:12] actually, it seems like Parser::recursiveTagParseFully will do the trick, but my wiki is too old [22:22:12] Hi, can someone point me to the documentation / video explaining the design of the mediawiki ? thanks in advance [23:09:32] Hello! [23:09:54] I'm trying to setup a mediawiki instance on ec2. Anyone know how I can remotely hit the initial config page? [23:10:33] /var/lib/mediawiki/mw-config/index.php gives me a 404 [23:13:50] you would access through your browser [23:14:03] Yeah, tried that. Fail. [23:14:30] Going to try this turnkey one now: https://aws.amazon.com/marketplace/pp/B0078U8W14 [23:15:03] nm. No free tier for this one. [23:15:05] *sigh* [23:15:16] AND there's no devuan option on ec2.