Hi, I would like to ask developers to set up Semantic MediaWiki extension on Czech Wikiversity (cs.wikiversity.org). The link to the agreement of the community is here:
http://cs.wikiversity.org/wiki/Wikiverzita:Diskusn%C3%AD_prostor#Request.2F.C5.BD.C3.A1dost
Version: unspecified
Severity: enhancement
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Declined | None | T27411 Set up SemanticForms on Czech Wikiversity | |||
| Declined | None | T27413 Set up SemanticResultFormats on Czech Wikiversity | |||
| Declined | Yaron_Koren | T27412 Set up SemanticDrilldown on Czech Wikiversity | |||
| Declined | None | T27410 Setup Semantic MediaWiki on Czech Wikiversity | |||
| Declined | None | T10390 Enable Semantic MediaWiki on WMF projects | |||
| Resolved | mkroetzsch | T10010 installing the extension breaks regression testing. |
Regarding the security review, I note that SMW also is available in a "light" variant that has reduced features but that can already be of some use. This SMWLight extension does not support inline queries and drops some datatypes, but it allows data collection, export, and basic retrieval. SMWLight is much smaller in size (currently about 6000 LOC).
It might be a useful strategy to start reviewing this core component first. There is no packaged release of SMWLight yet -- it is rather a configuration for deploying the complete code that makes many files obsolete. If a package of this abridged version is needed, I can provide it upon request. The fact that SMWLight uses the same files as SMW proper also means that any reviewing effort is also useful toward accomplishing the complete reviewing task.
Well, we are just Wikimedians. What is that security review about and why SMWLight doesnt need such review?
(In reply to comment #4)
Well, we are just Wikimedians. What is that security review about and why
SMWLight doesnt need such review?
It means the code needs to be looked at to make sure it doesn't have any security vulnerabilities. SMWLight would also need one; the reason Markus brought it up is that SMWLight is much less code, so it wouldn't take as long to review.
See https://www.mediawiki.org/wiki/Writing_an_extension_for_deployment for information on what is needed to get an extension reviewed before potentially deploying it on a wikisite.