[00:40:38] is there something in MediaWiki that screws with me when I use LibreWolf as my browser [00:40:43] cause this looks fine to most people i imagine [00:40:44] https://reconvergentfates.miraheze.org/wiki/Asesino_de_Ilusiones [00:40:49] but on my side it looks a little different [00:40:54] https://cdn.discordapp.com/attachments/407537962553966603/1501383222481653780/image.png?ex=69fbdf96&is=69fa8e16&hm=85b38e5d70417921a8544d16ab15d7fa2ca1f3a95071072e6d492c3564fb49b0& [00:41:16] for some reason, whenever | jname = in that infobox has too long of a thing, it also just cancels out and puts it into the title [06:02:41] LibreWolf is a Firefox fork, right? [06:03:40] I remember we recently had some issues on our wiki in a similar vein and it turned out that the Gecko engine doesn't read certain CSS classes that Chromium (or Safari) does [06:04:10] Yes, it's a fork of Firefox. [08:10:29] looks like that for me too [09:57:22] [1/21] Is there a way to get rid of that white border in images set to thumbnail? Or its just i did something wrong on CSS? [09:57:22] [2/21] https://dollsnest.miraheze.org/wiki/Type00_MNK_Sabi [09:57:23] [3/21] ```/ restyling the signed pictures / [09:57:23] [4/21] figure[typeof~='mw:File/Thumb'] > figcaption, figure[typeof~='mw:File/Frame'] > figcaption { [09:57:23] [5/21] border: none; [09:57:24] [6/21] border-top: 0; [09:57:24] [7/21] border-width: medium; [09:57:24] [8/21] box-shadow: none; [09:57:25] [9/21] background-color: transparent; [09:57:25] [10/21] font-size: 95%; [09:57:25] [11/21] font-family: 'Barlow', sans-serif !important; [09:57:26] [12/21] font-weight: 300 !important; [09:57:26] [13/21] } [09:57:27] [14/21] figure[typeof~='mw:File/Thumb'], figure[typeof~='mw:File/Frame'] { [09:57:27] [15/21] border: none; [09:57:28] [16/21] border-bottom: 0; [09:57:28] [17/21] border-width: 1px 1px 0.2em; [09:57:29] [18/21] box-shadow: none; [09:57:29] [19/21] background-color: transparent; [09:57:30] [20/21] }``` [09:57:30] [21/21] https://cdn.discordapp.com/attachments/407537962553966603/1501523260972728350/image.png?ex=69fc6202&is=69fb1082&hm=374bbc591e505ae40a51666fa92418f1a1e78d88e6ae19e83f97e576a7b1f73b& [09:59:16] [1/2] ah alright i see i just missed one thing [09:59:16] [2/2] https://cdn.discordapp.com/attachments/407537962553966603/1501523737319571538/image.png?ex=69fc6273&is=69fb10f3&hm=e07567fe3212f433f6c5c161c9f7954dd0e1aefdf368b95e231b462c470391c6& [10:11:29] you need to split it into multiple elements (use the {{Ruby}} template multiple times) cuz ruby annotations (being used for Katakana here) are not meant to wrap and Chrome is technically implementing the CSS spec incorrectly [10:11:30]

[11:00:22] [1/3] is there any sort of feature/extension that allows for discord announcement channels to have content uploaded to a wiki page? [11:00:22] [2/3] ie use this feature but on a wiki page rather than a discord server [11:00:22] [3/3] https://cdn.discordapp.com/attachments/407537962553966603/1501539112748843009/image.png?ex=69fc70c5&is=69fb1f45&hm=22fd42f9e010252bb989d25c6109218fa6a48297578c892687ea83f3c9049f71& [11:06:31] i guess that'd need a discord bot for it [11:07:54] discord announcement channels can't be followed like a regular RSS feed, you need a bot to grab the message and post it on the wiki [11:08:46] so nothing native for it? [11:08:57] i don't think it can be native [11:09:22] discord doesn't publish the message when you follow a channel, it gets cross-posted internally [11:10:11] i see, that's a shame [11:10:20] i'll look into it though, thanks for your help [13:46:09] Is there a better and faster way to see changes on my wiki (chrome)? Im pressing ctrl-shift-R but it still takes time to appear. Does the fact that Im using vpn affecting it? [13:47:09] Could try purging the page via the purge button [14:08:53] Ctrl+Shift+R purges your browser cache but not the page cache [14:09:44] If it's a page issue (like some template change) either purge button or null edit it, if it's CSS/JS what you're testing I strongly encourage using browser extensions or devtools to avoid having to save over and over [14:10:01] That said, you can append ?debug=2 to the URL [14:15:00] What do you find is the hardest thing to change on your wiki's content on a large scale? [14:19:54] I hated find replacing all the names to other names, one page at a time [14:32:00] what extension is there for css/js? [14:33:44] so it applies changes as soon as I submit them [14:33:51] without having me wait for like 10 minutes [14:34:07] Unai means browser extensions [14:34:17] Not MW extensions [14:34:31] There are Tampermonkey for JS and Stylus for CSS [14:34:57] I think Tampermonkey is called Greasemonkey on Firefox [14:35:57] And the way you use them is that you develop your script or style inside of them and then copy it onto the wiki when they work [14:38:41] Tampermonkey is called Tampermonkey on firefox; Greasemonkey is a different extension [14:38:58] I see [14:39:07] yes I understood that [14:39:39] I'll look into it, thanks all [14:40:00] for css I prefer https://chromewebstore.google.com/detail/live-editor-for-css-less/ifhikkcafabcgolfjegfcgloomalapol instead of stylus [14:40:28] -# I use it because it's portablecsspad on steroids [15:41:14] LL [16:06:21] it is being used multiple times [16:06:36] theres one Ruby element for the kanji/katana and another element for the romaji [16:06:51] unless you mean literally like [16:07:01] split up the template into two seperate segmemts [16:07:09] so its like [16:07:36] {{Ruby|Monte Cristo|Most Divine}}{{Ruby|Sandwich|Breakfast Meal}} [16:26:25] [1/2] how does wiki understand how to use images as borders? Im referencing pizza tower wiki and for code editor's borders it just has this image, as far as I understand [16:26:25] [2/2] https://cdn.discordapp.com/attachments/407537962553966603/1501621166022983872/PTWiki-spr_computerbubble.png?ex=69fcbd30&is=69fb6bb0&hm=30d769dcd20cfb34bee3e1cc463aadb4b6432c62c4d7cbf679298277605332bd& [16:32:00] it could be found here on line 601 https://pizzatower.wiki/MediaWiki:Common.css [17:16:11] [17:51:27] does anyone have an example of a page using bucket? [17:58:24] https://bucket.miraheze.org/wiki/Main_Page all here. Can slowly take a look [18:07:52] alr [18:09:27] I can show you mine if you want. Its still WIP but all bucket based [18:10:57] I used the bucket miraheze modules as a base [18:12:23] its fine, im probably gonna go ahead with cargo instead since its better suited to what i want to do [18:13:38] [1/2] https://outlanders.miraheze.org/wiki/Category:Modules [18:13:38] [2/2] https://outlanders.miraheze.org/wiki/Bread_(Outlanders_2) [18:18:35] also is there anywhere good where i can test an extension? [18:31:33] I did this but the embed still looks the same? [18:31:39] do i have to do anything else [18:31:54] https://digdug.miraheze.org/wiki/Taizo_Hori [18:32:01] oh wait now it works [18:32:03] nvm sorry [18:32:24] it seems to only apply to some pages though [18:32:25] https://digdug.miraheze.org/wiki/Digswith_Shovelle [18:52:36] https://digdug.miraheze.org/wiki/Digswith_Shovelle?a [18:52:48] Needs a null edit I guess [19:25:28] bump [19:27:40] ive set up a mediawiki instance in a docker container for testing things like that [19:27:55] was very simple, would recommend [19:28:00] plus a fun learning experience [19:32:07] ehh i'd prefer something more ease of access [19:36:42] [1/2] https://publictestwiki.com/ is the easiest option. [19:36:43] [2/2] If you want to do extension development, Docker is probably one of the easier options. If you use Linux or WSL you can install MediaWiki without virtualization which also works. [19:37:28] i just want to test an already-existing extension before bugging my bureau abt it [19:39:47] Public Test Wiki. If you tell me what the extension is I might know a wiki that uses it already. [19:41:47] Cargo, its something very specific tho [19:42:07] Should I just use sandboxes here? [19:46:45] PTW does not have Cargo enabled unfortunately. What is the thing you want to test? [19:47:12] Mainly just the storing and showing of data in templates [19:47:29] I need Cargo to take data input into one template, and output it into another [19:47:32] Sekaipedia and Blue Archive Wiki use Cargo extensively but I don't think they will be too happy about being your sandbox. [19:48:02] That's the basic functionality of Cargo. If you plan to just do that then Bucket works as well and do not require you to request it. [19:48:30] Yeah but from what I've read Cargo is easier to set up once you've got it in. [19:49:38] And it also isn't really how I want to use it? [19:50:02] We discourage the use of Cargo due to the myriad of security issues (mostly XSS) and the abundance of bugs. [19:51:07] It's because I need for it to read from a template that has another function, then output that data so it can be translated into another template [19:52:07] [1/2] Again, from your descriptions this is a basic functionality that can be achieved by either extension. [19:52:07] [2/2] https://bucket.miraheze.org/wiki/Formatting_output [19:52:24] alright, where can I test bucket then? [19:52:36] https://publictestwiki.com/ [19:52:40] alr thanks [19:56:19] i dont think they have bucket installed? its saying they dont have the module [19:56:45] They do [19:56:55] https://cdn.discordapp.com/attachments/407537962553966603/1501674142355820696/image.png?ex=69fcee87&is=69fb9d07&hm=3b71e754033f081c01044a77f88be518731a8da69a5b6192485a93595e9eae4e& [19:58:19] I see they got a demo as well, but it might be lacking modules ready to get data, though [19:58:23] I'm importing the modules right now. [19:58:51] Bucket modules are different from the extension itself [19:58:59] nono they have the modules [19:59:15] you importated them an hour ago [19:59:29] that or miraheze is [19:59:29] really [19:59:33] fucked up [20:06:45] More like less than 5 minutes ago when you said this. [20:06:54] odd [20:06:58] it showed an hour earlier for me [20:07:33] It was in the list of extensions but the modules did not exist. [20:07:49] Alright, if I put something onto a bucket, then I later delete the page thats putting that thing onto the bucket, does it disappear? [20:07:59] Making sure so I don't mess up the test bucket. [20:09:46] Yeah it'll disappear. Don't worry about messing up Public Test Wiki. [20:09:52] alr good [20:25:15] what is xss [20:25:32] Cross-site scripting. [20:26:11] Short version: A sneaky way of inserting code into the back and forth conversation that happens on the backend of websites [20:27:39] Why is it a security issue? [20:28:04] If you can insert code into a website that wasn't intended to be there, you can do things that the site admins don't want you to do [20:30:02] e.g. destructive stuff like delete data, or malicious stuff like pilfer user information. We do a lot of work to harden ourselves against that sort of nonsense [20:50:41] Does this only happen with JS? [20:53:06] Yeah. Many XSS vulnerabilities allow anyone to insert text as if they are js, which more-or-less makes them interface administrators, and interface administrators can easily obtain bureaucrat/administrator privileges if they abuse their role. [21:02:11] Does it happen with CSS too? [21:02:18] Damn, this website shit is not for the weak lol [21:03:45] If you're not using Internet Explorer there are limited things you can do through CSS [21:04:27] On a website without a CSP, unrestricted access to CSS would give you the ability to grab visitor IPs [21:04:41] Yes. A classic example is when you import unsanitized CSS that can be edited by anyone in MediaWiki:Common.css. As Kocka said, CSS is way less destructive except on very old browsers. [21:04:46] Miraheze has one though so I don't think that strategy would work [21:05:00] What is CSP? [21:05:14] Content security policy [21:05:25] A list of websites that the current web page is allowed to communicate with [21:07:19] CSS was able to crash your browser years ago [21:07:29] Probably the issue still remains there [21:07:53] But basically lots of sites that allowed user-defined CSS suffered from it [21:07:53] https://web.archive.org/web/20181130033806/https://cras.sh/ [21:08:02] Pretty sure they patched that one [21:08:49] [1/2] yup [21:08:49] [2/2] https://cdn.discordapp.com/attachments/407537962553966603/1501692234519547975/image.png?ex=69fcff60&is=69fbade0&hm=42c105c56a5f53d89bf738fdd3f957b02f169a14d8980af70d450d849395fa64& [21:10:19] CSS variables were sanitized in inline CSS in MediaWiki up until a couple years ago because of that [21:10:51] [1/2] When I copy-pasted wiki.gg CSS in dev tools it crashed the web page (not the browser though). [21:10:52] [2/2] https://discord.com/channels/407504499280707585/1288624156191096944/1407279925811089429 [21:11:34] Copy protection [21:11:50] DRM [21:12:45] I vaguely remember crashing my tab by creating a comically large container with calc() [21:14:40] I remember my browser crashing because I was watching new Fandom wikis for spam and some troll made a page with enormous font sizes or something like that [21:14:55] That was like 2017-18 though [21:15:40] I remember the 2015 security incident panic [21:16:05] They locked down lots of things until they figured out what happened [21:17:28] I guess having a login form on every single wiki page wasn't their brightest idea [21:18:09] I wasn't there at the time but someone linked me to a postmortem by the hackers [21:31:50] [1/3] How do I make my own wiki show link embeds like this? [21:31:51] [2/3] https://cdn.discordapp.com/attachments/407537962553966603/1501698028992467095/image.png?ex=69fd04c6&is=69fbb346&hm=44031e509c11a37ef76d5d9d8d49fc28e3e77debcff8ffcff58f60b9d2ed07dc& [21:31:51] [3/3] https://cdn.discordapp.com/attachments/407537962553966603/1501698029332201552/image.png?ex=69fd04c6&is=69fbb346&hm=5b38bea6e35b44447aef15334582fa033ac63af17c970acecbb39dcce48f4995& [21:32:18] yeah basically sitewide js was editably by anyone and the global navbar had a login form (just two text inputs and a submit button) in a dropdown [21:32:30] it's surprising it took them that long to exploit it tbh [21:33:20] it was also the time you could set an image to the global navbar and they wouldn't really mind [21:34:26] but at first all MW pages incl .css pages were locked, and I vaguely remember templates too. It scaled down a few hours later [21:35:29] Enable the PageImages extension and Popups extension. [21:40:48] I'm assuming I need to wait, since I enabled it but it doesn't seem to be doing anything yet [21:42:30] Scary [22:09:09] [[help:javascript]] contains some information about xss [22:09:10]

[22:43:14] Hello, are there people (in this server or elsewhere) that would refurbish my wiki in exchange for compensation? i have no experience with css/js and lua and frontend in general and do not wish to spend time to learn it. [22:45:47] Is there a place where I can leave a ticket to a staff member here or something of that equivalent? [23:04:37] I got the little popup, but the images for it won't embed in it [23:05:58] Which page [23:11:11] not really but do feel free to DM if it cannot be public [23:22:09] Usually closest equivalent would be email [23:22:53] It’s something about a user specifically on this server, not the site itself. Should I just dm one of you? [23:36:11] yea [23:53:30] Are you guys doing prunes or something why is the server back to under 10k [23:53:54] People are leaving bc Miraheze isn't down anymore [23:54:07] This happened once before too lol [23:54:30]