Install Widgets extension

RESOLVED FIXED in 2015-Q1

Status

--
enhancement
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: GPHemsley, Unassigned)

Tracking

unspecified
2015-Q1
Dependency tree / graph
Bug Flags:
sec-review ?

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [featurerequest] [extension][dev=2015-01-22][stage=2015-01-22][prod=2015-01-22], URL)

(Reporter)

Description

4 years ago
"The Widgets extension allows the creation of raw HTML pages that can be embedded (similarly to templates) in normal wiki pages. You do this by creating pages in the Widget namespace. They avoid the security problems of raw HTML in editable wiki pages because the privilege to edit in the Widget namespace is managed. Many pre-written Widgets are available."

There is a catalog of widgets available here:

http://www.mediawikiwidgets.org/Widgets_Catalog

There are clear security implications involved with installing this extension, but commentary on bug 961296 suggests that it passes sec-review.
Flags: sec-review?(amuntner)
(Reporter)

Updated

4 years ago
Blocks: 652592
(Reporter)

Updated

4 years ago
Depends on: 1032351
Flags: sec-review?(amuntner) → sec-review?
Target Milestone: --- → 2014-Q4

Updated

4 years ago
Whiteboard: [featurerequest] [extension] → [kanban:webops:https://kanbanize.com/ctrl_board/4/1984] [featurerequest] [extension]

Comment 1

4 years ago
This extension has been installed in the dev environment.  Christie was able to to install the Google Calendar extension ( https://wiki-dev.allizom.org/Widget:Google_Calendar ) and invoke it.
Whiteboard: [kanban:webops:https://kanbanize.com/ctrl_board/4/1984] [featurerequest] [extension] → [kanban:webops:https://kanbanize.com/ctrl_board/4/1984] [featurerequest] [extension][dev=2014-12-18]

Updated

4 years ago
Whiteboard: [kanban:webops:https://kanbanize.com/ctrl_board/4/1984] [featurerequest] [extension][dev=2014-12-18] → [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [] [featurerequest] [extension][dev=2014-12-18]
(Reporter)

Updated

4 years ago
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [] [featurerequest] [extension][dev=2014-12-18] → [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [featurerequest] [extension][dev=2014-12-18]
Target Milestone: 2014-Q4 → 2015-Q1
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [featurerequest] [extension][dev=2014-12-18] → [kanban:https://webops.kanbanize.com/ctrl_board/2/196] [featurerequest] [extension][dev=2015-01-22][stage=2015-01-22][prod=2015-01-22]

Comment 2

4 years ago
This was attempted in dev today with mixed results. The extension requires heavy modification to get it to function correctly. This needs to be forked and adjusted then we will pull it in from this location until upstream is patched.

This is currently working in dev, however it is somewhat brittle and therefore should not be relied upon.

Comment 3

4 years ago
This has been merged into master at:

https://github.com/mozilla/wiki.mozilla.org/pull/6

Pushed out to dev & stage today, prod scheduled for tomorrow

Comment 4

4 years ago
Log from stage push

$ sudo ./tools/update.sh
remote: Counting objects: 13, done.
remote: Compressing objects: 100% (9/9), done.
remote: Total 13 (delta 9), reused 8 (delta 4)
Unpacking objects: 100% (13/13), done.
From https://github.com/mozilla/wiki.mozilla.org
   d333301..4d2ca86  master     -> origin/master
 * [new branch]      2015-01-22 -> origin/2015-01-22
Updating d333301..4d2ca86
Fast-forward
 .gitmodules        | 3 +++
 LocalSettings.php  | 2 ++
 extensions/Widgets | 1 +
 3 files changed, 6 insertions(+)
 create mode 160000 extensions/Widgets
Submodule 'extensions/Widgets' (https://github.com/MozillaWiki/mediawiki-widgets.git) registered for path 'extensions/Widgets'
Cloning into 'extensions/Widgets'...
remote: Counting objects: 1086, done.
remote: Compressing objects: 100% (415/415), done.
remote: Total 1086 (delta 674), reused 1076 (delta 664)
Receiving objects: 100% (1086/1086), 309.84 KiB, done.
Resolving deltas: 100% (674/674), done.
Submodule path 'extensions/Widgets': checked out '140b2cf133316de7f2c4c00e1353668c6fc6907b'
Submodule 'smarty' (https://github.com/Fl4t/Smarty-git.git) registered for path 'smarty'
Cloning into 'smarty'...
remote: Counting objects: 147, done.
remote: Total 147 (delta 0), reused 0 (delta 0)
Receiving objects: 100% (147/147), 222.25 KiB, done.
Resolving deltas: 100% (36/36), done.
Submodule path 'smarty': checked out '50394b608acf4ab3fe0634761252bd9baa9400fb'
Loading composer repositories with package information
Updating dependencies (including require-dev)
Nothing to install or update
Generating autoload files
MediaWiki 1.23.8 Updater

Comment 5

4 years ago
As this was already checked out on dev with a different origin I had to run:

git remote set-url origin https://github.com/MozillaWiki/mediawiki-widgets.git

to fix it, things checked out cleanly after that. This issue did not occur on stage as the submodule was never installed there.


# git submodule update --init --recursive
remote: Counting objects: 3, done.
remote: Compressing objects: 100% (1/1), done.
remote: Total 3 (delta 2), reused 3 (delta 2)
Unpacking objects: 100% (3/3), done.
From https://github.com/MozillaWiki/mediawiki-widgets
   e30386c..140b2cf  REL1_23    -> origin/REL1_23
 * [new branch]      fix-paths  -> origin/fix-paths
Submodule path 'extensions/Widgets': checked out '140b2cf133316de7f2c4c00e1353668c6fc6907b'
Submodule 'smarty' (https://github.com/Fl4t/Smarty-git.git) registered for path 'smarty'
Cloning into 'smarty'...
remote: Counting objects: 147, done.
remote: Total 147 (delta 0), reused 0 (delta 0)
Receiving objects: 100% (147/147), 222.25 KiB, done.
Resolving deltas: 100% (36/36), done.
Submodule path 'smarty': checked out '50394b608acf4ab3fe0634761252bd9baa9400fb'

Comment 6

4 years ago
This was pushed out to production this morning. Everything worked as expected and all tests passed.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.