[10:53:00] Hey'all - can you please elaborate why this is hard-coded? https://github.com/wikimedia/mediawiki/blob/0b33adc9cacd130de64b60ef0c1dd96cfc53098e/includes/resourceloader/ResourceLoader.php#L979 [10:53:55] what If I want to remove Access-Control-Allow-Origin completely, it's a better way doing this and not just commenting out that line? [10:55:59] oddwill: https://github.com/wikimedia/mediawiki/commit/20135cde608a4388b0525eccbadf68fa66e9f825 [10:56:19] Is it a problem? [10:57:44] See also https://phabricator.wikimedia.org/T27886 [10:58:51] Vulpix honestly, an internal security scan flagged this... [10:59:40] Ah, those automated security scans... [11:00:26] Yeah, as we don't have anything accessing it, I was on a path to disable it. [11:02:29] If you can't filter-out headers from your webserver itself, I'd just go on and remove that line manually, and move on... [11:03:13] Just because a automated tool picks something up, doesn't make it wrong or needing to actioned. [11:03:31] I guess you can't argue with a brain-dead automatic security scan nor their operators... I've also had to dealt with them on other applications and it's extremely frustrating [11:03:58] That's correct p858snake|L, their voice is currently louder. [11:05:03] Should nginx's proxy_hide_header do the trick? [11:05:06] Many people that run those tests usually have no idea about security, at all. That's why they run them and only want all-green results. Trying to reason with them why it isn't a security issue is usually a waste of time [11:05:47] happy easter you lovely wiki programmers, translators, shell admins, sysops, readers and editors [11:16:45] is there a way to recieve an email when a some wiki user doing edits? not watch page, but watch specific user [11:18:24] https://www.mediawiki.org/wiki/Topic:Vkcvxu87pxw6fapz [11:18:28] can someone delete ^ [11:18:47] don't know why it isn't in speedy deletion category [11:18:50] thanks :) [11:19:41] done [11:20:02] thanks [11:20:45] and perharps a block, 4 deleted edits? [11:21:03] can't see the rest but that seems spamming [15:04:10] Hi folks. I recently got Parsoid running and ran into a bit of trouble. I wanted to generate (only) HTML from wikitext while using two extensions, Cite and Spoiler, with a few adjustments for Cite. However, I'm unable to find a way to reliably get the output I want. Pandoc and alternative parsers listed on MediaWiki have incomplete support at best [15:04:10] and incorrect output at worst and other markup tools/languages like Markdown or AsciiDoc aren't versatile enough. It seems that, to modify Cite's settings, I need to use system messages for which I'd need MediaWiki set up, something I'd like to avoid as all I want is a parser. Is my current goal impossible? If not, how am I supposed to go about it? [15:04:11] Am I misunderstanding things? I've jumped through a lot of hoops, tested a bunch of different parsers and I'm at my wit's end. I really wish to avoid writing HTML as much as I can and wikitext is the best lightweight markup language I've found, so I'd appreciate any help. [15:05:36] I also exhausted all forms of help before asking here as I didn't want to bother anyone with something that seems rather simple (in principle, at least). [15:09:47] AB1908: Possibly not the best time to be asking, unfortunately... It's a bank holiday weeked. The parsoid people aren't around atm [15:15:59] Oh totally forgot time zones were a thing. My bad. [15:16:35] When's a good time to ask? [15:18:25] TBH, leaving something on https://www.mediawiki.org/wiki/Talk:Parsoid might be better [15:19:03] Alright, thanks for the help. [15:19:45] But potentially Tuesday... And maybe ask in #mediawiki-parsoid if you wanted on IRC [15:19:49] Potentially this sort of time or later [15:20:09] Got it. [15:28:26] has anyone managed to get a drag and drop upload to work on page forms? I'm really struggling to figure out how to do so myself [22:01:49] It looks like someone has destroyed my wiki again: https://unofficial-tesla-tech.com [22:13:31] do you have a backup [22:16:41] !blankpage [22:16:41] A blank page or HTTP 500 error usually indicates a fatal PHP error. For information on debugging (including viewing errors), see . [23:16:38] Gryllida: Yes I have db backups, but the question is how did they do this" I have all account creation disabled. [23:17:33] Check your error logs [23:17:38] It's hard to say what's wrong [23:17:54] It might not be a change onwiki [23:18:50] $ curl -I https://unofficial-tesla-tech.com/ [23:18:51] HTTP/2 500 [23:23:14] last time that happened to me, it was a dodgy extension (eg, I wrote it myself) that didn't survive a php upgrade. 500 doesn't smell like vandalism