1044583 - Install Widgets extension

Status: RESOLVED FIXED

(Websites :: wiki.mozilla.org, enhancement)

Description

[Gordon P. Hemsley [:GPHemsley]]

"The Widgets extension allows the creation of raw HTML pages that can be embedded (similarly to templates) in normal wiki pages. You do this by creating pages in the Widget namespace. They avoid the security problems of raw HTML in editable wiki pages because the privilege to edit in the Widget namespace is managed. Many pre-written Widgets are available."

There is a catalog of widgets available here:

http://www.mediawikiwidgets.org/Widgets_Catalog

There are clear security implications involved with installing this extension, but commentary on bug 961296 suggests that it passes sec-review.

Comment 1

[C. Liang [:cyliang]]

This extension has been installed in the dev environment.  Christie was able to to install the Google Calendar extension ( https://wiki-dev.allizom.org/Widget:Google_Calendar ) and invoke it.

Comment 2

[Jason Crowe [:jd]]

This was attempted in dev today with mixed results. The extension requires heavy modification to get it to function correctly. This needs to be forked and adjusted then we will pull it in from this location until upstream is patched.

This is currently working in dev, however it is somewhat brittle and therefore should not be relied upon.

Comment 3

[Jason Crowe [:jd]]

This has been merged into master at:

https://github.com/mozilla/wiki.mozilla.org/pull/6

Pushed out to dev & stage today, prod scheduled for tomorrow

Comment 4

[C. Liang [:cyliang]]

Log from stage push

$ sudo ./tools/update.sh
remote: Counting objects: 13, done.
remote: Compressing objects: 100% (9/9), done.
remote: Total 13 (delta 9), reused 8 (delta 4)
Unpacking objects: 100% (13/13), done.
From https://github.com/mozilla/wiki.mozilla.org
   d333301..4d2ca86  master     -> origin/master
 * [new branch]      2015-01-22 -> origin/2015-01-22
Updating d333301..4d2ca86
Fast-forward
 .gitmodules        | 3 +++
 LocalSettings.php  | 2 ++
 extensions/Widgets | 1 +
 3 files changed, 6 insertions(+)
 create mode 160000 extensions/Widgets
Submodule 'extensions/Widgets' (https://github.com/MozillaWiki/mediawiki-widgets.git) registered for path 'extensions/Widgets'
Cloning into 'extensions/Widgets'...
remote: Counting objects: 1086, done.
remote: Compressing objects: 100% (415/415), done.
remote: Total 1086 (delta 674), reused 1076 (delta 664)
Receiving objects: 100% (1086/1086), 309.84 KiB, done.
Resolving deltas: 100% (674/674), done.
Submodule path 'extensions/Widgets': checked out '140b2cf133316de7f2c4c00e1353668c6fc6907b'
Submodule 'smarty' (https://github.com/Fl4t/Smarty-git.git) registered for path 'smarty'
Cloning into 'smarty'...
remote: Counting objects: 147, done.
remote: Total 147 (delta 0), reused 0 (delta 0)
Receiving objects: 100% (147/147), 222.25 KiB, done.
Resolving deltas: 100% (36/36), done.
Submodule path 'smarty': checked out '50394b608acf4ab3fe0634761252bd9baa9400fb'
Loading composer repositories with package information
Updating dependencies (including require-dev)
Nothing to install or update
Generating autoload files
MediaWiki 1.23.8 Updater

Comment 5

[Jason Crowe [:jd]]

As this was already checked out on dev with a different origin I had to run:

git remote set-url origin https://github.com/MozillaWiki/mediawiki-widgets.git

to fix it, things checked out cleanly after that. This issue did not occur on stage as the submodule was never installed there.


# git submodule update --init --recursive
remote: Counting objects: 3, done.
remote: Compressing objects: 100% (1/1), done.
remote: Total 3 (delta 2), reused 3 (delta 2)
Unpacking objects: 100% (3/3), done.
From https://github.com/MozillaWiki/mediawiki-widgets
   e30386c..140b2cf  REL1_23    -> origin/REL1_23
 * [new branch]      fix-paths  -> origin/fix-paths
Submodule path 'extensions/Widgets': checked out '140b2cf133316de7f2c4c00e1353668c6fc6907b'
Submodule 'smarty' (https://github.com/Fl4t/Smarty-git.git) registered for path 'smarty'
Cloning into 'smarty'...
remote: Counting objects: 147, done.
remote: Total 147 (delta 0), reused 0 (delta 0)
Receiving objects: 100% (147/147), 222.25 KiB, done.
Resolving deltas: 100% (36/36), done.
Submodule path 'smarty': checked out '50394b608acf4ab3fe0634761252bd9baa9400fb'

Comment 6

[Jason Crowe [:jd]]

This was pushed out to production this morning. Everything worked as expected and all tests passed.