Last modified: 2011-03-13 18:05:21 UTC
When the Firefox "Options/Web Features/Load Images/For the originating web site only" is selected, any image on wikipedia pages that were uploaded do not show up, due to the fact that the images have the path http://upload.wikimedia.org/wikipedia/... I believe Firefox is behaving properly (wikipedia.org != wikimedia.org) and the option is to provide better security. Wikipedia needs to change to use the same URL base for the page and its associated images.
wikiMedia.org domain is a generic domain for server and service used by all projects (wikiPedia, wikinews, wikibooks, wiktionary). If we change it to wikiPedia the problem will still happen for wikinews, wikibooks etc ... We could add a "upload" entry for the different domains, but then I believe it will cause image not to be cached by our proxy (cause URL are differents). So basicly, allow the wikimedia.org domain in your firefox.
I can understand that this is a big effort for you and your unwillingness to fix it. If there is a way you can add this to a wish list for the future, that would be great. As the world is getting more serious about web security, you might find this becoming more important.
Uploads have been moved to a separate domain *FOR* security, to help prevent access to main-site cookies from JavaScript nasties that might manage to sneak through bad browser security (eg Internet Explorer's notoriously bad file type detection).
