Special:UploadWizard loading insecure content from commons
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	Reedy
	Feb 22 2012, 9:00 PM

Description

Seen currently on both test.wiki and test2.wiki:

Version: unspecified
Severity: minor

		Status	Subtype	Assigned	Task
		Resolved		None	T36599 Special:UploadWizard loading insecure content from commons
		Resolved		• brion	T35045 mediawiki.feedback module should not load icon from upload.wikimedia.org

• bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 12:18 AM

• bzimport set Reference to bz34599.

• bzimport added a subscriber: Unknown Object (MLST).

This appears to actually be in mediawiki.feedback.js in core...

As a quick fix I'll just swap it to protocol-relative, but it should be replaced with CSS and a local image.

r112169 does the protocol-relative switch

r112172 does a proper fix, turning it into a locally-hosted .gif loaded via
styles in the module.

• Gilles moved this task from Untriaged to Done on the Multimedia board.