Last modified: 2013-03-28 22:25:01 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T16534, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 14534 - New informational security message for user .js pages
New informational security message for user .js pages
Status: NEW
Product: MediaWiki
Classification: Unclassified
Interface (Other open bugs)
unspecified
All All
: Low enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-06-13 20:03 UTC by RockMFR
Modified: 2013-03-28 22:25 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description RockMFR 2008-06-13 20:03:29 UTC
There should be a system message that is displayed on the top of the page for user .js (and possibly .css) pages when both viewing the page and when editing.

Security is the prime motivation for this enhancement. Right now, there are a number of system messages that can be used to inform users that they may be screwing themselves by editing a page (clearyourcache, usercssjsyoucanpreview, and userinvalidcssjstitle are the ones I know of), but it would be better to have a single centralized system message for security-related information. The purpose of this new system message would be to inform users that any code they preview or save can have negative consequences.

It is possible to include such a message in the current system messages, but it is both a pain in the ass to target to the correct pages and not the purpose of these system messages. This current situation is fine for enwiki, but other wikis would certainly benefit from a centralized message.
Comment 1 Siebrand Mazeland 2008-08-13 21:07:42 UTC
Component: Unknown -> User interface
Comment 2 AlexSm 2008-08-13 21:30:13 UTC
The enwiki is NOT fine, because I see this useless warning on other users .js pages, which I cannot edit anyway. The proposed new message is not going to fix this annoyance unless it's shown only for the page owner.


Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links