Page MenuHomeMiraheze

CSP ReviewTag
ActivePublic

Members

  • This project does not have any members.
  • View All

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

This is a tag to track and monitor the progress of all tasks that relate to the Content Security Policy and reviews associated with the CSP Whitelist Policy.

Recent Activity

Sat, Oct 16

John closed T8145: CSP review for Youtube.com as Resolved.
Sat, Oct 16, 11:33 · CSP Review, MediaWiki (SRE), MediaWiki
John closed T8173: Whitelist GoogleAPIs as Resolved.
Sat, Oct 16, 11:31 · MediaWiki (SRE), CSP Review, MediaWiki

Fri, Oct 15

John moved T8173: Whitelist GoogleAPIs from SRE Review to Pending Addition on the CSP Review board.
Fri, Oct 15, 21:59 · MediaWiki (SRE), CSP Review, MediaWiki
Universal_Omega reopened T8145: CSP review for Youtube.com as "Open".

It hasn't been fixed yet. It needs added to another portion of the CSP.

Fri, Oct 15, 05:56 · CSP Review, MediaWiki (SRE), MediaWiki
Ugochimobi closed T8145: CSP review for Youtube.com as Resolved.
Fri, Oct 15, 05:39 · CSP Review, MediaWiki (SRE), MediaWiki

Thu, Oct 14

Universal_Omega updated the task description for T8145: CSP review for Youtube.com.
Thu, Oct 14, 20:44 · CSP Review, MediaWiki (SRE), MediaWiki
Universal_Omega moved T8145: CSP review for Youtube.com from SRE Review to Pending Addition on the CSP Review board.
Thu, Oct 14, 20:44 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit added a comment to T8145: CSP review for Youtube.com.

Hm? It is?

Thu, Oct 14, 20:43 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit added a comment to T8145: CSP review for Youtube.com.

Just making this, just to make sure if it’s (not) allowed.

Thu, Oct 14, 20:43 · CSP Review, MediaWiki (SRE), MediaWiki
Universal_Omega added a comment to T8145: CSP review for Youtube.com.

This is already approved.

Thu, Oct 14, 20:43 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit added a comment to T8145: CSP review for Youtube.com.

AFAIK, this won’t probably happen due to privacy concerns regarding the parent company (Google).

Thu, Oct 14, 20:42 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit renamed T8145: CSP review for Youtube.com from CSP problem to CSP review for Youtube.com.
Thu, Oct 14, 20:42 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit merged T8149: CSP issue or something idk into T8145: CSP review for Youtube.com.
Thu, Oct 14, 20:41 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit merged task T8149: CSP issue or something idk into T8145: CSP review for Youtube.com.
Thu, Oct 14, 20:41 · CSP Review, MediaWiki (SRE)
Universal_Omega added a project to T8173: Whitelist GoogleAPIs: MediaWiki (SRE).
Thu, Oct 14, 20:39 · MediaWiki (SRE), CSP Review, MediaWiki
Bukkit updated the task description for T8173: Whitelist GoogleAPIs.
Thu, Oct 14, 20:39 · MediaWiki (SRE), CSP Review, MediaWiki
Bukkit edited projects for T8173: Whitelist GoogleAPIs, added: CSP Review; removed MediaWiki (SRE).
Thu, Oct 14, 20:37 · MediaWiki (SRE), CSP Review, MediaWiki

Mon, Oct 11

Bukkit added a project to T8145: CSP review for Youtube.com: CSP Review.
Mon, Oct 11, 17:33 · CSP Review, MediaWiki (SRE), MediaWiki
Bukkit added a comment to T8149: CSP issue or something idk.

The extension uses Youtube.com, and not youtube-nocookie.com, so that might be the issue.

Mon, Oct 11, 16:02 · CSP Review, MediaWiki (SRE)
Bukkit added a comment to T8149: CSP issue or something idk.

Perhaps the the extension uses youtube.com, and not youtube-nocookie.com.

Mon, Oct 11, 15:56 · CSP Review, MediaWiki (SRE)
Bukkit added a project to T8149: CSP issue or something idk: CSP Review.
Mon, Oct 11, 15:40 · CSP Review, MediaWiki (SRE)

Sun, Oct 10

John closed T8144: CSP review for OpenStreetMaps (OSM) as Resolved.

Already been approved.

Sun, Oct 10, 13:33 · MediaWiki (SRE), CSP Review
John closed T8142: CSP review for Google Maps as Resolved.

Google has already been approved.

Sun, Oct 10, 13:32 · CSP Review, MediaWiki (SRE)
Ugochimobi triaged T8144: CSP review for OpenStreetMaps (OSM) as Normal priority.
Sun, Oct 10, 12:40 · MediaWiki (SRE), CSP Review
Ugochimobi triaged T8143: CSP review for Bing Maps as Normal priority.
Sun, Oct 10, 12:39 · MediaWiki (SRE), CSP Review
Ugochimobi triaged T8142: CSP review for Google Maps as Normal priority.
Sun, Oct 10, 12:38 · CSP Review, MediaWiki (SRE)
Ugochimobi added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

Alright!

Sun, Oct 10, 12:31 · CSP Review, MediaWiki (SRE)
RhinosF1 added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

💔💔So what about Google, Bing or OpenStreet Maps?

Sun, Oct 10, 12:29 · CSP Review, MediaWiki (SRE)
Ugochimobi added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

💔💔So what about Google, Bing or OpenStreet Maps?

Sun, Oct 10, 12:23 · CSP Review, MediaWiki (SRE)
RhinosF1 closed T8131: CSP related issue for geohack.toolforge.com on FAMEPedia as Declined.

We've said we're not happy with it.

Sun, Oct 10, 06:57 · CSP Review, MediaWiki (SRE)
Universal_Omega added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

I don't personally agree this should be approved though.

Sun, Oct 10, 05:40 · CSP Review, MediaWiki (SRE)
Universal_Omega moved T8131: CSP related issue for geohack.toolforge.com on FAMEPedia from T&S Review to SRE Review on the CSP Review board.

If it doesn't pass SRE review it probably shouldn't be moved to T&S review.

Sun, Oct 10, 05:40 · CSP Review, MediaWiki (SRE)
Ugochimobi reopened T8131: CSP related issue for geohack.toolforge.com on FAMEPedia as "Open".

This, AFAIK, is supposed to pass this review..... Even from SRE

Sun, Oct 10, 02:09 · CSP Review, MediaWiki (SRE)

Sat, Oct 9

Bukkit closed T8131: CSP related issue for geohack.toolforge.com on FAMEPedia as Declined.

"If it’s not passing at SRE stage, there’s no point sending it across for T&S review as SRE are in policy as having ‘final’ say"

Sat, Oct 9, 19:54 · CSP Review, MediaWiki (SRE)
RhinosF1 moved T8131: CSP related issue for geohack.toolforge.com on FAMEPedia from SRE Review to T&S Review on the CSP Review board.

Passing to @Owen but it's not recommended by WMF sysadmins for their production so us poses same risks

Sat, Oct 9, 19:36 · CSP Review, MediaWiki (SRE)
RhinosF1 updated the task description for T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.
Sat, Oct 9, 19:34 · CSP Review, MediaWiki (SRE)
Universal_Omega added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

That is because of https://en.famepedia.org/wiki/Module:Coordinates#L-25

Sat, Oct 9, 19:30 · CSP Review, MediaWiki (SRE)
Bukkit added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

Used in English Wikipedia, iirc.

Sat, Oct 9, 19:25 · CSP Review, MediaWiki (SRE)
Bukkit added a comment to T8131: CSP related issue for geohack.toolforge.com on FAMEPedia.

Can confirm, gets

ERR_BLOCKED_BY_CSP

upon click.

Sat, Oct 9, 19:24 · CSP Review, MediaWiki (SRE)
Ugochimobi triaged T8131: CSP related issue for geohack.toolforge.com on FAMEPedia as Normal priority.
Sat, Oct 9, 18:33 · CSP Review, MediaWiki (SRE)

Mon, Sep 20

Owen moved T7899: Review shields.io CSP Entry from Backlog to External on the Trust & Safety board.
Mon, Sep 20, 16:40 · Trust & Safety, MediaWiki (SRE), CSP Review

Sep 18 2021

Universal_Omega closed T7567: Enable Extension:EmbedSpotify on mediterraneanvision.miraheze.org (+CSP whitelist request for spotify) as Resolved.

I have no merged the PRs. It will be available in Special:ManageWiki/extensions in a few minutes.

Sep 18 2021, 03:16 · Trust & Safety, CSP Review, MediaWiki (SRE), Extensions, Universal Omega

Sep 11 2021

Redmin claimed T7567: Enable Extension:EmbedSpotify on mediterraneanvision.miraheze.org (+CSP whitelist request for spotify).
Sep 11 2021, 19:05 · Trust & Safety, CSP Review, MediaWiki (SRE), Extensions, Universal Omega
Redmin updated the task description for T7567: Enable Extension:EmbedSpotify on mediterraneanvision.miraheze.org (+CSP whitelist request for spotify).
Sep 11 2021, 19:05 · Trust & Safety, CSP Review, MediaWiki (SRE), Extensions, Universal Omega
John closed T7874: Review Dropbox family of domains as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, MediaWiki (SRE), CSP Review
John closed T7902: Review openlayers.org CSP Entry as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, MediaWiki (SRE), CSP Review
John closed T7830: CSP Whitelist Additions for Extension:EmbedVideo Support (archive.org and soundcloud.org) as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, CSP Review, MediaWiki (SRE)
John closed T7906: Review onlinewebfonts CSP Entry as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, MediaWiki (SRE), CSP Review
John closed T7699: CSP Whitelist request: cdn.smutstone.com as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, CSP Review, MediaWiki (SRE)
John closed T7880: Review Imgbox CSP Entry as Resolved.
Sep 11 2021, 10:19 · Trust & Safety, MediaWiki (SRE), CSP Review