Examine which extensions are installed on login.wikimedia.org (loginwiki) and vote.wikimedia.org (votewiki)
Open, LowPublic
Actions

In T61702#957670, @Glaisher wrote:

needs to be disabled?

TemplateData

CentralNotice

UniversalLanguageSelector

ParserFunctions

Disambiguator

PagedTiffHandler

None of those should be needed

<Glaisher> Krenair: disabling Parsoid at loginwiki won't break anything, right?
<Krenair> Glaisher, I can't think of why it would...

Glaisher lowered the priority of this task from Medium to Low.Mar 10 2015, 5:39 PM

Glaisher updated the task description. (Show Details)

Glaisher set Security to None.

Change 225840 had a related patch set uploaded (by Alex Monk):
Disable a bunch of extensions on loginwiki/votewiki

https://gerrit.wikimedia.org/r/225840

Restricted Application added subscribers: Matanya, Aklapper. · View Herald TranscriptJul 20 2015, 2:56 AM

gerritbot added a project: Patch-For-Review.Jul 20 2015, 2:56 AM

Krenair renamed this task from Examine which extensions are installed on login.wikimedia.org (loginwiki) to Examine which extensions are installed on login.wikimedia.org (loginwiki) and vote.wikimedia.org (votewiki).Jul 20 2015, 2:57 AM

Krenair updated the task description. (Show Details)

Also, probably don't need these

Interwiki
OAIRepository
Random root page
SiteMatrix
UserMerge
Abuse Filter
ConfirmEdit, FancyCaptcha
SpamBlacklist
TitleBlacklist
AccountAudit
Disambiguator
Graph

Not sure about these:

GlobalRenameQueue
GlobalRenameRequest
MergeAccount
Renameuser
Renameuser for CentralAuth
CharInsert?
TorBlock?

It feels like I've just listed like all of Special:Version on loginwiki. Chris, do you think we need any of these?

In T61702#1464553, @Krenair wrote:

UserMerge

Necessary for global user merge.

Abuse Filter

ConfirmEdit, FancyCaptcha

SpamBlacklist

TitleBlacklist

TorBlock?

Do we allow people to directly create accounts on loginwiki? If so, these are necessary.

AccountAudit

Being undeployed in T105894: Disable, undeploy, and drop tables for AccountAudit, lets take care of it as part of that.

GlobalRenameQueue

GlobalRenameRequest

Can be disabled.

MergeAccount

Part of CentralAuth, which is necessary.

Renameuser

Renameuser for CentralAuth

Both necessary for GlobalRename to work properly.

Change 225840 merged by jenkins-bot:
Disable a bunch of extensions on loginwiki/votewiki

https://gerrit.wikimedia.org/r/225840

In T61702#1464570, @Legoktm wrote:

Abuse Filter

ConfirmEdit, FancyCaptcha

SpamBlacklist

TitleBlacklist

TorBlock?

Do we allow people to directly create accounts on loginwiki? If so, these are necessary.

No, only administrators can create accounts directly on loginwiki.

So that leaves me with this list:

GlobalRenameQueue
GlobalRenameRequest
Interwiki
OAIRepository
SiteMatrix
Disambiguator
Graph
CharInsert
Abuse Filter
ConfirmEdit, FancyCaptcha
SpamBlacklist
TitleBlacklist
TorBlock

Krenair mentioned this in rOMWC01c52cc5d7f1: Disable a bunch of extensions on loginwiki/votewiki.Jul 30 2015, 10:12 PM

In T61702#1493469, @Krenair wrote:

So that leaves me with this list:
[...]

So next step is that someone takes a closer look if those remaining extensions are actually needed?

In T61702#1644746, @Aklapper wrote:

So next step is that someone takes a closer look if those remaining extensions are actually needed?

Lego did wrt centralauth/SUL/etc.

I'd love if @csteipp could do the next round of review/give +1/-1 to removing them.

No major rush, afaict.

• csteipp added a project: Security-Team.Sep 16 2015, 7:25 PM

• csteipp moved this task from Incoming to Ready on the Security-Team board.

Mdann52 moved this task from Backlog to Working on on the Wikimedia-Site-requests board.Sep 21 2015, 7:20 AM

In T61702#1493469, @Krenair wrote:

OAIRepository

That's being deprecated via T70867, so I wouldn't worry about it here.

Legoktm added a project: Stewards-and-global-tools.Oct 27 2015, 4:57 PM

In T61702#1493469, @Krenair wrote:

So that leaves me with this list:

GlobalRenameQueue

GlobalRenameRequest

Interwiki

OAIRepository

SiteMatrix

Disambiguator

Graph

CharInsert

Abuse Filter

ConfirmEdit, FancyCaptcha

SpamBlacklist

TitleBlacklist

TorBlock

We can get rid of all of these. The anti-abuse ones aren't needed because users can't actually do anything on loginwiki.

Restricted Application added a subscriber: JEumerus. · View Herald TranscriptMar 11 2016, 8:03 PM

Regarding TitleBlacklist and AbuseFilter, are they needed to block account creations?

In T61702#2114540, @JEumerus wrote:

Regarding TitleBlacklist and AbuseFilter, are they needed to block account creations?

Accounts cannot be directly created by IPs at loginwiki and autocreations are not disallowed by TBL on Wikimedia wikis so it doesn't really change anything there.

• Deskana unsubscribed.Mar 12 2016, 8:54 PM

We need to keep confirmedit so the login form shows captchas after 3 failed attempts to log in.

MarcoAurelio removed a subscriber: • wikibugs-l-list.Apr 18 2016, 9:17 AM

In T61702#2112927, @Legoktm wrote:

In T61702#1493469, @Krenair wrote:

So that leaves me with this list:
[..]

I'd keep Interwiki and SiteMatrix. These seem useful entry points to have. Especially because votewiki and loginwiki are themselves listed in SiteMatrix (e.g. when queried on metawiki).

Graph and Disambiguator can go away right now.

MarcoAurelio removed a parent task: T43492: [DO NOT USE] Steward, global sysop and SWMT tasks bugs (tracking) [superseded by #Stewards-and-global-tools].Jan 11 2017, 11:39 PM

Peachey88 merged a task: T158023: Disable unnecessary extensions on loginwiki.Feb 14 2017, 9:41 AM

Peachey88 added a subscriber: Reedy.

Krinkle unsubscribed.Feb 14 2017, 7:07 PM

Matanya moved this task from Untriaged to Low priority on the Stewards-and-global-tools board.Apr 19 2017, 8:17 PM

TerraCodes subscribed.Aug 7 2017, 5:02 AM

• chasemp removed a project: Security-Team.Sep 4 2018, 3:17 PM

Framawiki subscribed.Dec 23 2018, 2:41 PM

DannyS712 subscribed.Jul 19 2020, 1:44 PM

Zabe subscribed.Oct 26 2021, 10:31 AM

Pppery removed a project: Patch-For-Review.Apr 8 2023, 5:34 PM