It doesn't look like that wiki has any Edit protection, unlike the wikimediafoundation.org wiki. It is up to OPs whether they want to enable the RSS extension on a site like that, of course, but I think some sort of protection should be added to the wiki or to the RSS extension before we let arbitrary people embed RSS feeds.

Since I was the last one to touch the RSS extension in any major way, I'm willing to do the work if OPs decides it can or should be modified.

director wrote:

Please let me know what OPs stands for (what does OPs mean).

I do not belong to arbitrary people, as I am one of three bureaucrats of http://ua.wikimedia.org, and I am the Executive Director of Wikimedia Ukraine (the WMF chapter in Ukraine), see http://internal.wikimedia.org/wiki/User:Perohanych and http://meta.wikimedia.org/wiki/User:Perohanych .

http://wikimediaukraine.wordpress.com/feed/ is the RSS feed from the official blog of Wikimedia Ukraine.

I just have protected http://ua.wikimedia.org/wiki/Вікімедіа_Україна (the main page of the beb-site). What did you mean when you said that some sort of
protection should be added to the wiki.

bugs wrote:

(In reply to comment #2)

Please let me know what OPs stands for (what does OPs mean).

It's "ops", as in the "operations team" -- the techies who make sure that the sites are up and manage the servers.

I do not belong to arbitrary people, as I am one of three bureaucrats of
http://ua.wikimedia.org, and I am the Executive Director of Wikimedia Ukraine
(the WMF chapter in Ukraine), see
http://internal.wikimedia.org/wiki/User:Perohanych and
http://meta.wikimedia.org/wiki/User:Perohanych .

http://wikimediaukraine.wordpress.com/feed/ is the RSS feed from the official
blog of Wikimedia Ukraine.

I don't think Mark meant that *you* (or WMUA) were "arbitrary people"! If we enable the RSS extension on a wiki that anyone can edit, then other random people (not you guys) could use this extension and that might be a security vulnerability. Whether or not it's a security concern, though, is the decision of the ops team.

Mark is the bugmeister, so he's just making sure that all of the information here is complete and clear, and making sure that the right people see it. He's trying to make sure your bug gets handled as soon as it possibly can. :-)

I just have protected http://ua.wikimedia.org/wiki/Вікімедіа_Україна (the main
page of the beb-site). What did you mean when you said that some sort of
protection should be added to the wiki.

I think Mark meant something for the whole site, such as disabling IP editing, but I could be wrong.

By the way, Mark, this bug is very similar: bug 26732. They both deal with enabling the RSS extension on public sites.

director wrote:

Can I ask to install any reasonable protection to http://ua.wikimedia.org and then install Extension:RSS ?

director wrote:

I have another idea - is it possible to allow only RSS feed http://wikimediaukraine.wordpress.com/feed/ and only on http://ua.wikimedia.org/wiki/Вікімедіа_Україна page ?

Casey, thanks for your help! I wasn't clear enough.

Yuri, I think it would be possible to only allow the RSS feed to work with certain sites. It seems like a reasonable request to me. However, it would still require work on the RSS extension to do that. I'll open a bug on the RSS extension.

See Bug 27768

director wrote:

Mark, can you install the current RSS extension to http://ua.wikimedia.org wiki, so that I could start design a web-page.

I do not expect any abuse of the extention.

Later, after you develop the RSS extension to only allow the RSS feed to work with
certain sites, it will be possible to replace the extension.

I can't install it. I'll try to see if I can ask someone else to do it.

director wrote:

Thank you, Mark. I think that RSS extension would be useful also for other Wikimedia Chapters websites to display the latest news and views from the Wikimedia Foundation blog and the Chapters' blogs.

director wrote:

We do agree to configure our chapter's wiki - http://ua.wikimedia.org the same way as the wikimediafoundation wiki is configured, so that only "trusted people" could edit it. Please do it. Should something else be done by us?

Ashar might have the ability to install the RSS extension and set your wiki up the same as WikimediaFoundation's. Adding him to CC.

bugs wrote:

Ashar, I could be wrong but I think all you'd need to set the wiki up like WMF.org is to add uawikimedia to fishbowl.dblist. I have no idea how you'd install the extension though. =P

director wrote:

Any news?

I've just added a blocking workaround to the extension underneath

Done

director wrote:

I asket to install http://www.mediawiki.org/wiki/Extension:RSS for
http://ua.wikimedia.org

I just checked http://ua.wikimedia.org/wiki/special:Version and have founded that the RSS has not been installed. Please help.

director wrote:

I asked

(In reply to comment #16)

Done

What was done?

From the wmf-config/InitialiseSettings.php file :

'wmgUseRSSExtension' => array(

'default' => false,
'foundationwiki' => true,
'mediawikiwiki' => true,

),
'wmgRSSAllowedFeeds' => array(

'default' => array(),
'uawikimedia' => array( 'http://wikimediaukraine.wordpress.com/feed/' ),

),

So it looks like the extension is not enabled yet.

director wrote:

As far as I understand the RSS Extension should be installed to http://ua.wikimedia.org website.

The status of installation can be checked on: http://ua.wikimedia.org/wiki/special:Version

Was fixed by Jeremy Baron https://gerrit.wikimedia.org/r/10673 and deployed.