[08:54:15] Do customizations of l10n messages (such as via Mediawiki: pages) end up in the localization cache? [12:47:01] man, this channel is Deeed! [12:47:28] we used to laugh at peple who came in, asked a question and left 5 mins later [12:47:37] I've been here for 5 days! [12:48:10] Is there a way to see how many installs a given extension has? [12:48:23] Should I look for project stars or similar? [12:50:44] https://wikiapiary.com, but it's not always clear how up to date the numbers are and which wikis are counted. [12:55:40] hi s7eph4n[m] [14:21:44] non o dem got ratings [14:59:08] faceface: Some extensions are developed on GitHub and you might find ratings there. Otherwise... [14:59:09] It really depends on what info you really need. If you just want to try some extensions that "everybody else" uses, go with the Wikiapiary rankings. If you want to estimate the quality of an extension and frequent problems, have a look at the discussion page. [15:00:22] And have a look at the bugs on Phabricator or Github (whichever is applicable). [15:32:34] New parser function extension XSL which transforms XML docs with XSL [15:32:49] Looking for a reviewer https://gerrit.wikimedia.org/r/#/c/mediawiki/extensions/XSL/+/547554/ [15:50:17] freephile: you have a few security vulnerabilities there. I spot an obvious XSS and arbitrary filesystem reads. Have you even tested this? [15:51:18] I don't see how it's really even usable from a wiki since every function you're calling takes filesystem paths as params instead of strings [16:15:12] Skizzerz: Thanks for looking... Here's an example wiki page using the extension https://slicer.qualitybox.us/wiki/Documentation/4.10/Modules/ACPCTransform [16:16:29] What is the obvious XSS exploit? Can you suggest a fix? [16:18:22] ditch the ability for the user to specify that the output is HTML [16:21:21] Thanks, the users are all trusted, so I'll have to check whether that feature is used at all and add relevant warnings for other users if the feature is retained [16:22:20] (allowing arbitrary CSS is a security risk as well, I'm not familiar enough with XSL stylesheets to know what they're capable of) [16:31:19] The purpose of the extension is to take XML from external systems, and output that as XHTML in the wiki [16:49:55] !semantic [16:49:55] Semantic MediaWiki is MediaWiki extension that lets you store and query data within the wiki's pages. It has a dedicated IRC channel at #semantic-mediawiki. [16:50:01] !hss [16:50:01] https://upload.wikimedia.org/wikipedia/mediawiki/6/69/Hesaidsemanticga2.jpg [22:46:04] Hello there, I'd like a quick pointer on how to purge all the parser caches when using memcached, other than restarting the memcache server [22:53:56] !wg CacheEpoch | barrack [22:53:57] barrack: https://www.mediawiki.org/wiki/Manual:%24wgCacheEpoch [22:56:30] Interesting, I already have that 2nd line of code (using the mtime of LocalSettings). However, the bug still exists. [22:56:50] may I ask if you think this cache key is valid "