This is another incarnation of bug 42452.
Right now on MediaWiki.org this URL...
https://bits.wikimedia.org/www.mediawiki.org/load.php?debug=false&lang=en&modules=ext.echo.base%2Cicons%2Coverlay&skin=vector&version=20130109T025749Z&*
serves JS that was replaced with new code via a scap over 6 hours ago.
The correct code can be seen here:
https://bits.wikimedia.org/test.wikipedia.org/load.php?debug=false&lang=en&modules=ext.echo.base%2Cicons%2Coverlay&skin=vector&version=20130109T025749Z&*
The old code includes the string 'html-light'. The new code includes the string 'flyout'. Using debug=true always serves the newer code.
Here are all of the headers from the bad version on mediawiki.org:
Response Headers
Accept-Ranges bytes
Age 74247
Cache-Control public, max-age=2592000, s-maxage=2592000
Connection keep-alive
Content-Encoding gzip
Content-Type text/javascript; charset=utf-8
Date Wed, 09 Jan 2013 23:44:49 GMT
Expires Fri, 08 Feb 2013 03:07:22 GMT
Last-Modified Wed, 09 Jan 2013 02:57:49 GMT
Server nginx/1.1.19
Vary Accept-Encoding
Via 1.1 varnish
X-Cache strontium hit (135)
X-Content-Type-Options nosniff
X-Powered-By PHP/5.3.10-1ubuntu3.4+wmf1
X-Varnish 3394214363 3019335717
X-Vary-Options Accept-Encoding;list-contains=gzip
Request Headers
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding gzip, deflate
Accept-Language en-US,en;q=0.5
Cache-Control max-age=0
Connection keep-alive
DNT 1
Host bits.wikimedia.org
If-Modified-Since Wed, 09 Jan 2013 02:57:49 GMT
Response Headers From Cache
Accept-Ranges bytes
Age 74247
Cache-Control public, max-age=2592000, s-maxage=2592000
Content-Encoding gzip
Content-Length 5764
Content-Type text/javascript; charset=utf-8
Date Wed, 09 Jan 2013 23:44:49 GMT
Expires Fri, 08 Feb 2013 03:07:22 GMT
Last-Modified Wed, 09 Jan 2013 02:57:49 GMT
Server nginx/1.1.19
Vary Accept-Encoding
Via 1.1 varnish
X-Cache strontium hit (135)
X-Content-Type-Options nosniff
X-Powered-By PHP/5.3.10-1ubuntu3.4+wmf1
X-Varnish 3394214363 3019335717
X-Vary-Options Accept-Encoding;list-contains=gzip
Here are all of the headers from the good version on test.wikipedia.org:
Response Headers
Accept-Ranges bytes
Age 0
Cache-Control public, max-age=2592000, s-maxage=2592000
Connection keep-alive
Content-Encoding gzip
Content-Type text/javascript; charset=utf-8
Date Wed, 09 Jan 2013 23:52:22 GMT
Expires Fri, 08 Feb 2013 23:52:22 GMT
Last-Modified Wed, 09 Jan 2013 08:13:35 GMT
Server nginx/1.1.19
Vary Accept-Encoding
Via 1.1 varnish
X-Cache niobium miss (0)
X-Content-Type-Options nosniff
X-Powered-By PHP/5.3.10-1ubuntu3.4+wmf1
X-Varnish 3151962049
X-Vary-Options Accept-Encoding;list-contains=gzip
Request Headers
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding gzip, deflate
Accept-Language en-US,en;q=0.5
Cache-Control max-age=0
Connection keep-alive
DNT 1
Host bits.wikimedia.org
If-Modified-Since Wed, 09 Jan 2013 08:13:35 GMT
Response Headers From Cache
Accept-Ranges bytes
Age 0
Cache-Control public, max-age=2592000, s-maxage=2592000
Content-Encoding gzip
Content-Length 5800
Content-Type text/javascript; charset=utf-8
Date Wed, 09 Jan 2013 23:52:22 GMT
Expires Fri, 08 Feb 2013 23:52:22 GMT
Last-Modified Wed, 09 Jan 2013 08:13:35 GMT
Server nginx/1.1.19
Vary Accept-Encoding
Via 1.1 varnish
X-Cache niobium miss (0)
X-Content-Type-Options nosniff
X-Powered-By PHP/5.3.10-1ubuntu3.4+wmf1
X-Varnish 3151962049
X-Vary-Options Accept-Encoding;list-contains=gzip
It doesn't seem to matter which varnish servers are hit--arsenic, stronium, niobium, and palladium all give the same results consistently: the old code on mediawiki.org and the new code on test.wiki. Both mediawiki.org and test.wiki are running the same version of MediaWiki (wmf7) and should both be updated by the scap.
Version: unspecified
Severity: major