User talk:Enterprisey/script-installer
This is a subpage of Enterprisey's talk page, where you can send him messages and comments. |
|
Archives: 1 |
Feature request: generate code that matches {{subst:iusc}}
[edit]Here's my common.js right now.
importScript( 'User:Enterprisey/script-installer.js' ); // Backlink: User:Enterprisey/script-installer.js importScript('User:Enterprisey/easy-brfa.js'); // Backlink: User:Enterprisey/easy-brfa.js importScript('User:Enterprisey/cv-revdel.js'); // Backlink: User:Enterprisey/cv-revdel.js importScript('User:Enterprisey/reply-link.js'); // Backlink: User:Enterprisey/reply-link.js importScript('User:Enterprisey/talk-tab-count.js'); // Backlink: User:Enterprisey/talk-tab-count.js importScript('User:Enterprisey/user-tabs-on-contribs.js'); // Backlink: User:Enterprisey/user-tabs-on-contribs.js
Does that bug you? It bugs me. Would it be possible to change script-installer to match {{subst:iusc}}'s output? (For that matter, is there a reason it doesn't just generate that subst in the first place? DRY and all that.) Gaelan 💬✏️ 09:39, 24 February 2019 (UTC)
- Gaelan, is this still an issue? I checked your common.js and my common.js and couldn't see what you're talking about - I'm probably not understanding your comment. Enterprisey (talk!) 06:28, 13 October 2019 (UTC)
- Oh, spacing inside the parentheses. Huh. Yeah, the subst would be fine. I don't feel very strongly about this. I guess I'll consider adding spaces. Enterprisey (talk!) 04:19, 26 January 2021 (UTC)
- As of 2024, the gadget is not putting spaces inside parentheses. Judging from the lack of comments on this page, I don't think most users mind. Probably should leave as is. –Novem Linguae (talk) 17:48, 7 May 2024 (UTC)
- Oh, spacing inside the parentheses. Huh. Yeah, the subst would be fine. I don't feel very strongly about this. I guess I'll consider adding spaces. Enterprisey (talk!) 04:19, 26 January 2021 (UTC)
- Counter-proposal: Template talk:Install user script#Protected edit request on 15 June 2024. —andrybak (talk) 20:58, 15 June 2024 (UTC)
Global
[edit]@Enterprisey: It would be neat if this script was extended to allow installing scripts on global.js, too. ~★ nmaia d 01:05, 15 September 2020 (UTC)
- Status: I have no plans to work on this, but would be happy to mentor someone if they wanted to work on it themselves. Enterprisey (talk!) 23:53, 13 August 2021 (UTC)
TODO: Bulk deletion support
[edit]With checkboxes. Enterprisey (talk!) 04:10, 26 January 2021 (UTC)
- That'd be great! — 𝐆𝐮𝐚𝐫𝐚𝐩𝐢𝐫𝐚𝐧𝐠𝐚 (talk) 23:41, 26 May 2021 (UTC)
- Status: I have no plans to work on this, but would be happy to mentor someone if they wanted to work on it themselves. Enterprisey (talk!) 23:53, 13 August 2021 (UTC)
id vs data-
[edit]I don't think relying on IDs for getting script paths is a good idea as it results in invalid HTML if the same path appears more than once per page. Shouldn't it use a data-*
attribute? Nardog (talk) 23:18, 8 April 2021 (UTC)
scriptManager
[edit]@Enterprisey: It would be helpful if you added a function allowing you to add scripts using scriptManager's syntax. ― Qwerfjkl | 𝕋𝔸𝕃𝕂 (please use {{reply to|Qwerfjkl}}
on reply) 13:53, 23 May 2021 (UTC)
- Agreed. — Guarapiranga (talk) 23:50, 26 May 2021 (UTC)
- Status: I have no plans to work on this, but would be happy to mentor someone if they wanted to work on it themselves. Enterprisey (talk!) 23:53, 13 August 2021 (UTC)
Lusc instead of iusc
[edit]This script still seems to be using {{Iusc}}, rather than {{Lusc}}, which I understand to be the preferred method. Enterprisey, would it be possible to update that? {{u|Sdkb}} talk 03:47, 23 November 2021 (UTC)
- @Enterprisey: Any update on this?
importScript()
(which {{iusc}}) uses has been deprecated for a while now. See T95964 ―sportzpikachu my talkcontribs 10:45, 10 December 2021 (UTC)- I plan to get to this at some point, but it's not urgent; there's still no good official replacement ("Gadgets 3.0" or whatever number they're on now). So it would just be for the slight performance benefit. Enterprisey (talk!) 04:42, 11 December 2021 (UTC)
- Strong oppose. There was some misinformation going around a year or two ago that iusc was deprecated, but this had no basis in fact. See Template:Install user script#importScript() is not deprecated for more info. I strongly prefer iusc because it is much more readable. –Novem Linguae (talk) 17:52, 7 May 2024 (UTC)
- I switched all my scripts to use {{Lusc}} in 2021 after I was told that it would significantly improve page loading speed, and at the time it seemed to do so. Is that no longer the case? Sdkb talk 18:06, 7 May 2024 (UTC)
- Interesting. I haven't looked into the performance angle of this. –Novem Linguae (talk) 18:45, 7 May 2024 (UTC)
- I switched all my scripts to use {{Lusc}} in 2021 after I was told that it would significantly improve page loading speed, and at the time it seemed to do so. Is that no longer the case? Sdkb talk 18:06, 7 May 2024 (UTC)
- Strong oppose. There was some misinformation going around a year or two ago that iusc was deprecated, but this had no basis in fact. See Template:Install user script#importScript() is not deprecated for more info. I strongly prefer iusc because it is much more readable. –Novem Linguae (talk) 17:52, 7 May 2024 (UTC)
- I plan to get to this at some point, but it's not urgent; there's still no good official replacement ("Gadgets 3.0" or whatever number they're on now). So it would just be for the slight performance benefit. Enterprisey (talk!) 04:42, 11 December 2021 (UTC)
Various to-dos
[edit]@Enterprisey: Now that phab:T300743 is fixed, I can list the other to-do items that I noticed while looking for XSS issues. These are all suggestions for future development that you can take or leave as you see fit.
- The gadget should check the content model of script pages before installing them, and only install ones with a content model of JavaScript. In theory, not checking this would allow an attacker to add JavaScript code to a wikitext page in a trusted user's userspace (which anyone can edit), and then trick the victim into installing the attacker's code while the victim believes it is written by the trusted user. In practice, this attack is stopped by MediaWiki setting the X-Content-Type-Options header to "nosniff", which prevents loading scripts from pages that don't have a MIME type of "text/javascript". This could be a problem in very old browsers though, so it would be worth fixing.
- Import.fromJs is broken for scripts with double or single quotes in them (e.g.
User:Example/foo"bar.js
). The script trims the first quote character and everything after it, which means it tries to install e.g.User:Example/foo
instead. Fixing this would mean parsing the string with a JavaScript parser instead of with regex - unfortunately, I'm not aware of an easy way of doing that without installing third-party libraries, so this could be a lot of work. - The cookie attributes of the open_script_installer need fixing. Firefox was giving the following warning in the console:
Cookie “open_script_installer” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite
. - There are some missing translation strings: see the latter half of the diff of the Chinese translation to see where they are. They also use different pipe and bracket characters, so those might be worth including as well. The mw.Message class might be worth a look into for this.
Best — Mr. Stradivarius ♪ talk ♪ 13:33, 7 February 2022 (UTC)
unable to uninstall autoFormatter & cleanDiff
[edit]@Enterprisey: i am unable to uninstall both autoFormatter & cleanDiff on common.js. can you please look into it. <_> jindam, vani (talk) 13:56, 27 December 2022 (UTC)
- Links: meta:User:TMg/autoFormatter, de:Benutzer:TMg/cleanDiff.js. These are both non-English Wikipedia user scripts, which is probably why this gadget didn't work. –Novem Linguae (talk) 17:55, 7 May 2024 (UTC)
Recognize Full Protection
[edit]@Enterprisey Currently, the script claims that Wikipedia:AutoEd/complete.js is insecure, in spite of the full protection. Could support be added? Aaron Liu (talk) 16:56, 13 September 2023 (UTC)
Should script-installer add userscript pages to the watchlist?
[edit]Working on userscripts sometimes requires discussion. Because script-installer is a gadget, this talk page is relatively active, but this is not true for all userscripts. In a recent case, I posted on the talk page of the author, because the script didn't have an existing talk page (both documentation and the code talk pages don't exist at the time of writing). However, in another case I created a talk page corresponding to the script's documentation page and pinged the author.
Technically, due to backlinks generated by automatic script installation, I could figure out all the users, but pinging or messaging them would be way too much spam, which is disruptive.
What if script-installer automatically added/removed the pages (documentation and .js) of a userscript being installed/uninstalled to the watchlist? This would keep the users informed of any updates that might affect them, and maybe encourage their participation in discussions.
On the other hand, such automatic meddling with the watchlist might annoy some users. —andrybak (talk) 13:11, 4 June 2024 (UTC)
- Andrybak, it could be added as a default-on preference that can be configured in the common.js/skin.js page, like nav popups has. — Qwerfjkltalk 16:24, 4 June 2024 (UTC)
- Is the proposal to automatically add to your watchlist any user script installed with this gadget? I wouldn't personally be interested in that. I've installed around 50 user scripts, I think, and I don't have a reason for them to be on my watchlist. Please correct me if I'm misunderstanding. –Novem Linguae (talk) 16:39, 4 June 2024 (UTC)
- Your understanding of the proposal is correct. With Qwerfjkl's preference idea, it will be possible to disable this functionality. —andrybak (talk) 16:52, 4 June 2024 (UTC)
I have implemented this proposal in my sandbox: Special:Diff/1231540064/1231548208. During installation, the gadget will automatically add the source code page (example: User:Shubinator/DYKcheck.js) and the documentation page (example: User:Shubinator/DYKcheck) to the watchlist. During uninstallation, the gadget will automatically remove the pages from the watchlist. The customization of this automatic watching/unwatching feature can be done via two new options:
window.scriptInstallerWatch = false; // disable automatic watching
window.scriptInstallerUnwatch = false; // disable automatic unwatching
There are two options rather than one, because there are use-cases for all four combinations:
- the default is both automatic watching and automatic unwatching are enabled – for users who want to keep track only of scripts they currently have installed
- disable only watching for people who don't want scripts on their watchlists (≈ Novem Linguae's use-case)
- disable only unwatching for people who want to keep tabs on scripts that they've uninstalled, but, for example, might want to install in the future, when it shows up in their watchlist
- disable both watching and unwatching for people who want to control their watchlist manually (current status quo)
What do you think? —andrybak (talk) 22:27, 28 June 2024 (UTC)
- Talk page watchers, is anyone else interested in this feature? I do not think this should default to on without consensus, and maybe not even be included at all without consensus (since if this were to be mostly unused, it would increase technical debt) –Novem Linguae (talk) 22:31, 28 June 2024 (UTC)
- Novem Linguae, I can't imagine ever using something like this, but I'm probably in the minority when it comes to using scripts. — Qwerfjkltalk 21:00, 29 June 2024 (UTC)
- I would be strongly opposed to making it the default (opt-out). Script users often don't understand (or forget over time) which script is responsible for which part of their site experience, and adding the script/doc to their watchlists may overburden (and eventually discourage) script authors when something goes wrong. Instead lead them to WP:VPT, where help (e.g. forking) is more likely to be found. Nardog (talk) 01:31, 30 June 2024 (UTC)
Confusing history of importScript
[edit]Due to some confusing discussions around functions importScript
and mw.loader.load
, I have attempted to reconstruct the events, which lead to the confusion.
I've considered different places for this discussion. The most automated way of installing script nowadays is the installer gadget, so I selected this talk page. —andrybak (talk) 12:27, 7 June 2024 (UTC)
Timeline of importScript
[edit]- 2008: Brooke Vibber (aka Brooke Vibber (WMF)) adds function
importScript
to file wikibits.js in commit 36b1931:(bug 13232) importScript(), importStylesheet() funcs available to custom JS
- Referenced ticket: bugzilla:13232, aka phab:T15232. This Git commit is also known as SVN commit phab:rSVN35064.
- 2010: Trevor Parscal (WMF) adds
importScript
at the page mw:ResourceLoader/Legacy JavaScript (mw:Special:Permalink/344964) to a long table:The following identifiers are planned to be considered deprecated, quarantined, and eventual removed.
- 2011: TheDJ says at enwiki Village pump discussion "importScript > mw.loader.load" (underlining for emphasis mine):
Though deprecated, it is expected that a next version of resource loader (which will be more focused on userscripts) will bring a true replacement for importScript().
- 2012: At talk page of "ResourceLoader/Legacy JavaScript", in mw:Topic:Qgo3q6e0hvae1dpj Krinkle (aka Timo Tijhof (WMF)) says:
If you are looking to update your scripts to not use deprecated functions, and come across calls to "
importScript
" and "importStylesheet
", you are free to just keep using those the way they are. You don't have to fear them being removed, that will not happen until after a better replacement exists.- Per result of this discussion, User:קיפודנחש adds the following text to the page "ResourceLoader/Legacy JavaScript":
importScript // importStylesheet // There two functions are not quite deprecated yet, but are planned to be, once a suitable modern substitute is found. See bugzilla:25845 and bugzilla:27281
- Referenced tickets are phab:T27845 and phab:T29281.
- Per result of this discussion, User:קיפודנחש adds the following text to the page "ResourceLoader/Legacy JavaScript":
- 2015
- On 2015-04-13, Schnark marks the function as deprecated in the source code in commit 5c5e090 (aka gerrit:203293) with a very detailed commit message:
wikibits: Mark importScript/importStylesheet utilities as deprecated
The global variable loadedScripts and the import functions from wikibits.js
have been deprecated since 1.17 [1].[...] Use mw.loader.load() instead.
Note that there are minor differences between the deprecated functions
and mw.loader.load(), see [1] for details.- The [1] link is to mw:RL/LJS#wikibits.js (redirect to mw:ResourceLoader/Legacy JavaScript#wikibits.js), which at the time of writing (2015-08-13) was mw:Special:Permalink/1687750#wikibits.js, quote:
These two functions are not quite deprecated yet, but are planned to be, once a suitable modern substitute is found. See phab:T27845 and phab:T29281
- Note the switch from Bugzilla links to Phabricator links compared to aforementioned 2012's version of the same text.
- The [1] link is to mw:RL/LJS#wikibits.js (redirect to mw:ResourceLoader/Legacy JavaScript#wikibits.js), which at the time of writing (2015-08-13) was mw:Special:Permalink/1687750#wikibits.js, quote:
- On 2015-04-23, ten days later, Matma Rex reverts this change in commit 8eb99c9 (aka gerrit:206078):
wikibits: Un-deprecate importScript and importStylesheet
Per discussion on T95964. No suitable replacement exists yet.
- On 2015-04-13, Schnark marks the function as deprecated in the source code in commit 5c5e090 (aka gerrit:203293) with a very detailed commit message:
- 2016: Users KPu3uC B Poccuu and V111P disagree about status of the deprecation at Template talk:Install user script#Remove the deprecated import function.
- 2018
- On 2018-01-26, Krinkle merged the page mw:ResourceLoader/Legacy JavaScript into mw:ResourceLoader/Migration guide (users) in a series of edits. The result of the merge was mw:Special:Permalink/2701322.
- On 2018-12-03, Ahecht creates an edit request and Galobtter declines it a couple of days later at Template talk:Install user script#Protected edit request on 3 December 2018
- 2019: Franklin Yu joins the discussion at Template talk:Install user script with
importScript
is surely deprecated- Franklin Yu based this reply on this revision of mw:ResourceLoader/Migration guide (users)
- 2020: users RoySmith, Fred Gandt, and Enterprisey discuss script loading at Wikipedia talk:User scripts, with a mention of deprecation status of
importScript
. - 2021
- On 2021-01-26, Izno says at enwiki Village pump:
importScript
, like many of its cousins, was deprecated in MediaWiki 1.29- Izno based this reply on this revision of mw:ResourceLoader/Migration guide (users)
- On 2021-12-10 Sportzpikachu says in a discussion of enwiki's script-installer gadget:
importScript()
(which {{iusc}}) uses has been deprecated for a while now. See T95964
- On 2021-01-26, Izno says at enwiki Village pump:
- 2022
- On 2022-08-05, Krinkle in commit 51155b0 (aka gerrit:820828) moves the function
importScript
from wikibits.js to mediawiki.base.js, quote:Move the non-deprecated importScript (not the deprecated "URI" variants)
functions to mediawiki.base, and cover them with tests.- Accordingly, Krinkle removes
importScript
from the aforementioned table of deprecated functions with edit summary:importScript has never been deprecated, no warnigns, source explicilty states otherwise, no intention to remove.
- Accordingly, Krinkle removes
- On 2022-09-01, Krinkle in commit 0ff333e (aka gerrit:828663 and gerrit:831217) writes:
ResourceLoader: Remove $wgIncludeLegacyJavaScript and simplify code
[...]
importScript: Never deprecated in the first place as there is no mw.loader equivalent to this. In order to achieve optimal cache performance, and benefit from automatic purging after edits, one must craft a very specificly encoded and ordered canonical action=raw URL. This is not something end-users need to know about, and is what imporScript exists for to abstract. Plus, it ensures de-duplication. One day something like Gadgets 3.0 (T36958) might take off, but for many years to come, importScript remains the best and only supported and usable means within the platform to share and load user scripts.- On 2022-10-29, MacFan4000 adds the corresponding release note for MediaWiki 1.39.0, which was released at the end of November (underlining mine):
Removed configuration [...]
$wgIncludeLegacyJavaScript
has been removed. Note that no functionality was removed in this release. Most former "wikibits" functions were removed after deprecation in previous releases. The remaining functions, such as importScript, are available unconditionally.
- On 2022-10-29, MacFan4000 adds the corresponding release note for MediaWiki 1.39.0, which was released at the end of November (underlining mine):
- On 2022-08-05, Krinkle in commit 51155b0 (aka gerrit:820828) moves the function
- 2024: Novem Linguae responds to the same discussion of enwiki's script-installer gadget about two and a half years after the discussion started:
There was some misinformation going around a year or two ago that iusc was deprecated, but this had no basis in fact. See Template:Install user script#importScript() is not deprecated for more info.
Feel free to edit this timeline if you find mistakes, anything relevant turns up, or to improve formatting. —andrybak (talk) 12:27, 7 June 2024 (UTC)
- Added Template talk:Install user script#Protected edit request on 3 December 2018. —andrybak (talk) 12:35, 7 June 2024 (UTC)
- Added Gerrit links corresponding to the existing Phabricator links for commits. —andrybak (talk) 18:24, 7 June 2024 (UTC)
- Added quote from 2022-09-01 commit. —andrybak (talk) 20:16, 7 June 2024 (UTC)
- Added Gerrit links corresponding to the existing Phabricator links for commits. —andrybak (talk) 18:24, 7 June 2024 (UTC)
- Would it be helpful to color code the timeline? Something like or for situations when the person thought the function was deprecated and for when they didn't. —andrybak (talk) 13:29, 7 June 2024 (UTC)
Discussion – Confusing history of importScript
[edit]It seems that most of the confusion was caused by the discrepancies between three sources of information: source code, mw:ResourceLoader/Legacy JavaScript, and mw:ResourceLoader/Migration guide (users). Hopefully this will clear up any confusion and clarify why people were confused. Let me know, if there are any other discussions.
Courtesy pings to other participants of discussions and tickets: He7d3r, Skizzerz, Gary, Mdowdell. —andrybak (talk) 12:27, 7 June 2024 (UTC)
- As of 7 June 2024[update], the up-to-date information is at Template:Install user script#importScript() is not deprecated (Special:Permalink/1197700514). —andrybak (talk) 13:00, 7 June 2024 (UTC)
- What if we added a note to the page mw:ResourceLoader/Migration_guide_(users)#MediaWiki_1.29, similar to Template:Install user script#importScript() is not deprecated? —andrybak (talk) 13:49, 7 June 2024 (UTC)
- More courtesy pings for participants of the 2021 VPT discussion: Sdkb, Enterprisey, Berchanhimez, Jon (WMF), Jonesey95, CaptainEek, GhostInTheMachine, Ladsgroup, xaosflux, SD0001. —andrybak (talk) 13:07, 7 June 2024 (UTC)
- That's a lot of pings. Does this issue need all this attention? I feel it has been resolved for a year or two. –Novem Linguae (talk) 13:34, 7 June 2024 (UTC)
- Maybe it doesn't. I'm trying to ensure that the misinformation doesn't spread. For me personally, the starting point was Izno's 2021 comment (i.e. I was thinking it was deprecated), so this wall of text started as a draft for a message on his talk page asking for clarification, because I couldn't find what he was referring to about MediaWiki 1.29. I also had a vague memory of your
Special:Diff/1222746631Special:Diff/1222747277, but I failed to find it for a long time during the investigation. —andrybak (talk) 13:49, 7 June 2024 (UTC)- Fixed incorrect diff link in this old message of mine. —andrybak (talk) 00:19, 1 September 2024 (UTC)
- Thanks @andrybak for putting together the very detailed history. At the time I added that comment I thought importScript had been deprecated (don't remember where I got that from tbh), but @Novem Linguae has already clarified that above. However I do agree with @Novem Linguae that there isn't much left to do regarding importScript vs mw.loader.load. ―sportzpikachu my talkcontribs 14:20, 7 June 2024 (UTC)
- I'm still curious whether there's any performance difference between the two options. If not, importScript is certainly cleaner. Sdkb talk 15:48, 7 June 2024 (UTC)
- There is no performance difference (and there never was). Both functions use exactly the same mechanism for loading a script. Furthermore, if the same script is
importScript
ed twice, it only loads once – which is not the case while using mw.loader.load, so in a way importScript is faster. – SD0001 (talk) 06:05, 8 June 2024 (UTC)- That is an impressive history. Nice detective work. – Jonesey95 (talk) 01:34, 11 June 2024 (UTC)
- There is no performance difference (and there never was). Both functions use exactly the same mechanism for loading a script. Furthermore, if the same script is
- I'm still curious whether there's any performance difference between the two options. If not, importScript is certainly cleaner. Sdkb talk 15:48, 7 June 2024 (UTC)
- Maybe it doesn't. I'm trying to ensure that the misinformation doesn't spread. For me personally, the starting point was Izno's 2021 comment (i.e. I was thinking it was deprecated), so this wall of text started as a draft for a message on his talk page asking for clarification, because I couldn't find what he was referring to about MediaWiki 1.29. I also had a vague memory of your
- importScript() is not deprecated but it will be. Seeing from the patches such as gerrit:206078 and gerrit:203293 the intent is clear. Further use will make the migration harder in the future. Ladsgroupoverleg 18:06, 7 June 2024 (UTC)
- Ladsgroup, the Gerrit links you've provided correspond to the items for year 2015 in the timeline above – I've used slightly different view via Phabricator*. Note the chronological order of these two patches:
- Apr 14, 2015 gerrit:203293 "wikibits: Mark importScript/importStylesheet utilities as deprecated"
- Apr 23, 2015 gerrit:206078 "wikibits: Un-deprecate importScript and importStylesheet // Per discussion on T95964. No suitable replacement exists yet."
- * in addition to Gerrit and Phabricator, there is also the third view via Gitiles (which is integrated into Gerrit): 5c5e090 (wikibits: Mark importScript/importStylesheet utilities as deprecated, 2015-04-11), 8eb99c9 (wikibits: Un-deprecate importScript and importStylesheet, 2015-04-23). The dates can be confusing, because there are three of them for each patch/commit: author date, committer date, and submitted.
- Hope this helps. —andrybak (talk) 18:18, 7 June 2024 (UTC)
- importScript has major code readability advantages over mw.loader.load. I definitely hope it is never deprecated. If it comes up in phab or gerrit I plan to share my opinion.
- The author of gerrit:203293 mentioned above later said
For local imports, call importScript(). This is not, and never was, deprecated. For cross-wiki and other less trivial use cases, call mw.loader.load()
, which makes me wonder if there is still an intent to deprecate it. –Novem Linguae (talk) 19:36, 7 June 2024 (UTC)- I've added another relevant commit to the timeline, which mentions mw:Gadgets 3.0 (phab:T36958), and suggests that
importScript
is here to stay for quite a long time. - For context, the ticket for Gadgets 2.0 – phab:T31272: is still in status "Open", because it seems to be waiting on T153339, T125582, T31398, and T110014. However, a lot of other subtasks of T31272 are already implemented. T31272 also links to mw:Extension:Gadgets/Roadmap, which is marked as obsolete, which is confusing. The latest comments under T31272 are from April 2024 with consideration to integrate Gadgets 2.0 into an even bigger project – mw:Growth/Community configuration (phab:T323811), but this integration doesn't seem to have happened – the gadgets are only mentioned in T323811 under "Possible usecases". —andrybak (talk) 20:33, 7 June 2024 (UTC)
- I've added another relevant commit to the timeline, which mentions mw:Gadgets 3.0 (phab:T36958), and suggests that
- The undeprecation patch is a decade old and mentions "no suitable replacement exists" - which still holds true. It's not like it will be deprecated until a replacement exists - which arguably is Gadgets 3 (phab:T36958). – SD0001 (talk) 06:10, 8 June 2024 (UTC)
- Ladsgroup, the Gerrit links you've provided correspond to the items for year 2015 in the timeline above – I've used slightly different view via Phabricator*. Note the chronological order of these two patches:
- That's a lot of pings. Does this issue need all this attention? I feel it has been resolved for a year or two. –Novem Linguae (talk) 13:34, 7 June 2024 (UTC)
"Normalize" function breaks CSS imports
[edit]Edit Jack who built the house (talk) 15:50, 13 July 2024 (UTC)
- Looking at documentation of function mw.loader.load, it seems that just avoiding spaces inside the quoted 'string' or "string" of the parameter could be enough: Special:Diff/1234315858.
- A more radical, more hacky approach is to remember which quotation marks—single
'
or double"
—were used and check if the part of the match, where we're expecting a singular parameter, includes the remembered quotation mark: Special:Diff/1231549277/1234730968. —andrybak (talk) 18:54, 13 July 2024 (UTC)
Add user-select: none
to #script-installer-top-container
[edit]This edit request to mediawiki:gadget-script-installer-core.js has been answered. Set the |answered= or |ans= parameter to no to reactivate your request. |
Otherwise, when selecting the page title, the selection spreads to the script's links:
Jack who built the house (talk) 12:41, 16 August 2024 (UTC)
- I've been using it in my sandbox version. Seems good so far, no issues found. —andrybak (talk) 00:05, 21 August 2024 (UTC)
- Is there something wrong with making links selectable? This is the standard behavior for almost all links on websites, right? Might be counter-intuitive to turn it off. –Novem Linguae (talk) 21:56, 27 August 2024 (UTC)
- I think this is pretty much like how
.mw-editsection
[ edit | edit source ] hasuser-select: none
. Jack who built the house (talk) 23:59, 27 August 2024 (UTC) - It makes copying the page title harder, as triple-clicking it also ends up selecting the install link. This is different from, for instance, how you can triple-click a section header to select just the header, not the edit links. – SD0001 (talk) 15:12, 28 August 2024 (UTC)
- Done (except I added it to the CSS rather than the JS) * Pppery * it has begun... 16:15, 9 November 2024 (UTC)
- I think this is pretty much like how
Interface-protected edit request on 20 August 2024
[edit]It is requested that an edit be made to the interface page at MediaWiki:Gadget-script-installer-core.js. (edit · history · last · links)
This template must be followed by a complete and specific description of the request, that is, specify what text should be removed and a verbatim copy of the text that should replace it. "Please change X" is not acceptable and will be rejected; the request must be of the form "please change X to Y".
The edit may be made by any interface administrator. Remember to change the |
On MediaWiki:Gadget-script-installer-core.js#L-590, please replace the line with the following:
const scriptName = this.id.replaceAll("_", " ");
This will convert underscores to spaces, which will prevent duplicate script installs and false reports that a script that is installed isn't installed. Awesome Aasim 16:57, 20 August 2024 (UTC)
- Use
.replace(/_/g, " ")
instead of.replaceAll("_", " ")
, which is not supported by some Grade A browsers. Nardog (talk) 01:43, 21 August 2024 (UTC)- Also per the style followed in the script, the space should be in single quotes. – SD0001 (talk) 10:50, 27 August 2024 (UTC)
- @Awesome Aasim:: Do you have an example of this actually occurring in the wild? From my brief testing, it looks like the element id that this is keying off of is alredy normalized with respect to spaces/underscores. Writ Keeper ⚇♔ 17:02, 31 August 2024 (UTC)
- @Writ Keeper It is happening to me. I install a script and in some places it shows as not installed and in other places it shows as installed. It is a mess. Awesome Aasim 17:49, 31 August 2024 (UTC)
- I was looking for some specifics. What script, where are you seeing this, where are you not seeing this, etc. Writ Keeper ⚇♔ 21:17, 31 August 2024 (UTC)
- I just created an example script to demonstrate my point. See User:Awesome Aasim/example script.js and User:Awesome Aasim/example script. Awesome Aasim 23:10, 31 August 2024 (UTC)
- That works correctly for me. What behavior are you seeing that seems wrong? Writ Keeper ⚇♔ 00:53, 1 September 2024 (UTC)
- For one, the script shows with underscores. The other, the script shows with spaces. See [1]. Awesome Aasim 02:30, 1 September 2024 (UTC)
- Not done There does not seem to be sufficient agreement here to make an edit to a widely used gadget. * Pppery * it has begun... 16:16, 9 November 2024 (UTC)
- I don't think consensus is needed to fix an obvious bug. User:Nardog seems to have a good suggestion. Awesome Aasim 19:51, 22 November 2024 (UTC)
- Ping User:Nardog for above. Awesome Aasim 19:52, 22 November 2024 (UTC)
- Not done There does not seem to be sufficient agreement here to make an edit to a widely used gadget. * Pppery * it has begun... 16:16, 9 November 2024 (UTC)
- For one, the script shows with underscores. The other, the script shows with spaces. See [1]. Awesome Aasim 02:30, 1 September 2024 (UTC)
- That works correctly for me. What behavior are you seeing that seems wrong? Writ Keeper ⚇♔ 00:53, 1 September 2024 (UTC)
- I just created an example script to demonstrate my point. See User:Awesome Aasim/example script.js and User:Awesome Aasim/example script. Awesome Aasim 23:10, 31 August 2024 (UTC)
- I was looking for some specifics. What script, where are you seeing this, where are you not seeing this, etc. Writ Keeper ⚇♔ 21:17, 31 August 2024 (UTC)
- @Writ Keeper It is happening to me. I install a script and in some places it shows as not installed and in other places it shows as installed. It is a mess. Awesome Aasim 17:49, 31 August 2024 (UTC)
- 03:22, 17 November 2024 (UTC) 104.156.14.1 (talk) 08:31, 25 November 2024 (UTC)
So after a bit of testing, I found the culprit. There are several places where there can potentially be underscores in the title. One of them is the "href" attribute linking back to the script.
After assigning scriptName
, replacing all the underscores with spaces seems to work. Reopening this edit request with two things:
- MediaWiki:Gadget-script-installer-core.js#L-590 should read
const scriptName = this.id.replace( /_/g, ' ' ); // if the script name happens to contain underscores, this purges it
- MediaWiki:Gadget-script-installer-core.js#L-610 should have the following added before the JS filtering line:
scriptName = scriptName.replace( /_/g, ' ' ); // if the script name happens to contain underscores, this purges it
See [2]. Awesome Aasim 20:15, 22 November 2024 (UTC)
- I'm not going to decline this request twice, because that's poor form, but the discussion with Writ Keeper above shows that this clearly is not
an obvious bug
. * Pppery * it has begun... 00:14, 23 November 2024 (UTC)- When it is pulling from the
href
property of an element it will contain underscores instead of spaces. Awesome Aasim 18:00, 23 November 2024 (UTC)- xss and state not identified correclty 104.156.14.1 (talk) 08:31, 25 November 2024 (UTC)
- When it is pulling from the
Interface-protected edit request on 28 August 2024
[edit]This edit request to MediaWiki:Gadget-script-installer-core.css has been answered. Set the |answered= or |ans= parameter to no to reactivate your request. |
Define background color using CSS variables, for night mode compatibility. The header background color will change slightly (from #CAE1FF to #A3D3FF), as there is no perfectly matching CSS variable.
− | #script-installer-panel {
width: 60%;
border: solid lightgray 1px;
padding: 0;
margin-left: auto;
margin-right: auto;
margin-bottom: 15px;
overflow: auto;
box-shadow: 5px 5px 5px #999;
background-color: | + | #script-installer-panel {
width: 60%;
border: solid lightgray 1px;
padding: 0;
margin-left: auto;
margin-right: auto;
margin-bottom: 15px;
overflow: auto;
box-shadow: 5px 5px 5px #999;
background-color: var(--background-color-base, #fff);
z-index: 50;
}
#script-installer-panel header {
background-color: var(--background-color-content-added, #a3d3ff);
display: block;
padding: 5px;
font-size: 1.1em;
font-weight: bold;
text-align: left;
} |
Andumé (talk) 17:32, 28 August 2024 (UTC)
- I haven't had a chance to try and test this in a sandbox or anything, but has anyone else had a chance to review this request? From the get-go, it seems to be pretty harmless... ~Oshwah~(talk) (contribs) 20:38, 11 September 2024 (UTC)
- Agreed that this looks harmless. This might be a good one to just make the edit directly to the gadget, then quickly test it by adding &debug=1 to the URL to clear the cache. Then take a peek at #script-installer-panel on a user's JS page by clicking "Manage user scripts" and make sure things don't look too crazy. In fact now that I typed this out I think I'll just do it :) One sec. –Novem Linguae (talk) 20:51, 11 September 2024 (UTC)
- Looks good to me. Done –Novem Linguae (talk) 20:55, 11 September 2024 (UTC)
- Agreed that this looks harmless. This might be a good one to just make the edit directly to the gadget, then quickly test it by adding &debug=1 to the URL to clear the cache. Then take a peek at #script-installer-panel on a user's JS page by clicking "Manage user scripts" and make sure things don't look too crazy. In fact now that I typed this out I think I'll just do it :) One sec. –Novem Linguae (talk) 20:51, 11 September 2024 (UTC)
Move STRINGS to separate JSON file
[edit]Hi! Can anyone please put the STRINGS in a separate JSON (for example)? This will allow loading the script directly from enwiki, and changing a separate file if localization is needed. Iniquity (talk) 17:18, 17 November 2024 (UTC)