Page MenuHomeMiraheze

Extension:TopicTags
Closed, DeclinedPublic

Description

Wiki URLmagic.miraheze.org

Hello guys. A long time ago I started to look for an althernative for Categories, maybe tags-cloud or tah - like in DocuWiki, which would provide an extra functionality for multi-lingual, deep-complicated structure of wiki. Finally I came across with this extentions.
https://www.mediawiki.org/wiki/Extension:TopicTags
As it says on webpage, the extention is under development and no oficial release yet.
''This should work if installed as directed. ''
Please try install this extention.
Appreciate your support and thank you in advance.

Related Objects

Event Timeline

Redmin edited projects, added Extensions; removed MediaWiki.

Hi, this extension would need a security review.

The MediaWiki.org page that has been linked does not contain the link to the source code. Could you please link it? It should also be noted that an extension that has been mentioned as a dependency will need to be reviewed as well. Thank you.

Good question. I am not an experienced coder and when I read again to find out how possible to install this extention, I understand that there is no source code, that is why the extention called php-free. The extention, in my understanding, would work after installing all the dependant extentions plus creating a separate wiki pages with wikitext.

I walked through all requiled extentions on our wiki, so the one only is missing:
https://www.mediawiki.org/wiki/Extension:HTML_Tags
All the rest are installed successfuly already,

I'm not sure this is actually an extension

I think you just copy the pages it mentions to your wiki

I think you just copy the pages it mentions to your wiki

PHP-Free_Experiment
Simply, yes, I should just copy the pages. But still, there are required extentions must be installed in order to provide a complete service.
And I found that Extension:HTML_Tags is missing on our wiki. Please install Extension:HTML_Tags. Thank you in advance.

I found this- https://www.mediawiki.org/wiki/Topic:Ucx3870iubclp1i7. So this does seem to have its source code somewhere.

Unknown Object (User) added a comment.Feb 11 2021, 17:31
TopicTags:

See https://www.mediawiki.org/wiki/Extension:TopicTags#Known_Issues. However since that is not really an extension and just requires other pages to be added and other extensions installed, It's not to much a risk. At least not if HTML tags isn't.

HTML Tags:

From an initial look at the code, while I have concerns about the nature of it, the code looks fine at a glance. It seems to be security-safe (per HTMLTags.php#L65) however like I said, I still have concerns about the nature of the extension.

PS. Sorry @R4356th for kind of taking over your task. I'll leave the rest to you.

Redmin reassigned this task from Redmin to Unknown Object (User).EditedFeb 12 2021, 19:03
Redmin subscribed.

Per discussion on Discord.

Unknown Object (User) added a comment.Feb 14 2021, 16:07
In T6841#134827, @R4356th wrote:

I found this- https://www.mediawiki.org/wiki/Topic:Ucx3870iubclp1i7. So this does seem to have its source code somewhere.

All that is saying is what to do in order to make the extension appear in Special:Version, is you locally add that code. We definitely can't do that though, unless we create a git repository with that in it.

Unknown Object (User) closed this task as Declined.Feb 15 2021, 23:50

Unfortunately I must decline HTML Tags for security concerns.

Helper reopened this task as Open.EditedFeb 16 2021, 09:27

@Universal_Omega, as I understand, the problem is in code creating a separate menu item on Special: page. There are a lot of extentions work without menu on Special. Is it possiple to install the extention without that menu item ? I understand, the problem is with specificaly extention:HTML_Tags. The requested extention:TopicTags is actually php-free extention, only extention:HTML_tags is missing on list of 5 or 6 extentions to make the php-free extention to work. I am asking to check the option to bypass using the code with security concern, please see what is possible to do. Thanks.

Unfortunately I must decline HTML Tags for security concerns.

WMF has a task regarding this extension but it has not been touched in a long time, by the way.

Oops, sorry about this!

Unknown Object (User) closed this task as Declined.Feb 21 2021, 15:48

@Helper my concerns come from any of the tags, including <a> and others. Therefore I must decline it.