Last modified: 2013-03-28 22:25:01 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 14534 - New informational security message for user .js pages
New informational security message for user .js pages
Status: NEW
Product: MediaWiki
Classification: Unclassified
Interface (Other open bugs)
All All
: Low enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
Depends on:
  Show dependency treegraph
Reported: 2008-06-13 20:03 UTC by RockMFR
Modified: 2013-03-28 22:25 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description RockMFR 2008-06-13 20:03:29 UTC
There should be a system message that is displayed on the top of the page for user .js (and possibly .css) pages when both viewing the page and when editing.

Security is the prime motivation for this enhancement. Right now, there are a number of system messages that can be used to inform users that they may be screwing themselves by editing a page (clearyourcache, usercssjsyoucanpreview, and userinvalidcssjstitle are the ones I know of), but it would be better to have a single centralized system message for security-related information. The purpose of this new system message would be to inform users that any code they preview or save can have negative consequences.

It is possible to include such a message in the current system messages, but it is both a pain in the ass to target to the correct pages and not the purpose of these system messages. This current situation is fine for enwiki, but other wikis would certainly benefit from a centralized message.
Comment 1 Siebrand Mazeland 2008-08-13 21:07:42 UTC
Component: Unknown -> User interface
Comment 2 AlexSm 2008-08-13 21:30:13 UTC
The enwiki is NOT fine, because I see this useless warning on other users .js pages, which I cannot edit anyway. The proposed new message is not going to fix this annoyance unless it's shown only for the page owner.

Note You need to log in before you can comment on or make changes to this bug.