MediaWiki:Template:MainPageInfopush.js - Revision history

Usr 6b189dbf-f096-47d0-afbd-136782d7014b: Removed protection from "MediaWiki:Template:MainPageInfopush.js": No longer needed

2025-03-01T11:48:09Z

Removed protection from "MediaWiki:Template:MainPageInfopush.js": No longer needed

← Older revision		Revision as of 11:48, 1 March 2025
(No difference)

Usr 6b189dbf-f096-47d0-afbd-136782d7014b: Protected "MediaWiki:Template:MainPageInfopush.js": High-risk template or module ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

2025-03-01T11:41:57Z

Protected "MediaWiki:Template:MainPageInfopush.js": High-risk template or module ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

← Older revision		Revision as of 11:41, 1 March 2025
(No difference)

Usr 578aa632-439b-4c41-9266-776323ba9ad2: fix: don't render articles for items with overridden links

2025-03-01T11:28:27Z

fix: don't render articles for items with overridden links

← Older revision		Revision as of 11:28, 1 March 2025
Line 77:		Line 77:
	for (const item of items) {		for (const item of items) {
	const { articleId } = item.dataset;		const { articleId } = item.dataset;
	if (!articleId) continue;		// If we've given this item an link override, but it previously had an article, we'll ignore it.
			if (!articleId \|\| !!item.querySelector("a")) continue;

	item.style.cursor = "pointer";		item.style.cursor = "pointer";

Usr 578aa632-439b-4c41-9266-776323ba9ad2: fix: remote code execution exploit with infopush

2025-03-01T11:13:18Z

fix: remote code execution exploit with infopush

← Older revision		Revision as of 11:13, 1 March 2025
Line 2:		Line 2:
	(function () {		(function () {
	mw.loader.using(["oojs-ui-core", "oojs-ui-windows"]).done(() => {		mw.loader.using(["oojs-ui-core", "oojs-ui-windows"]).done(() => {
			const [pageName, pageLanguage] = mw.config.values.wgPageName.split("/");

			// Restrict component rendering to the Main Page (or translated versions of itself!)
			// as we'll run arbitrary code based on the content.
			if (pageName !== "Main_Page" && (!pageLanguage \|\| mw.config.values.wgPageContentLanguage != pageLanguage)) return;

	var windowManager = new OO.ui.WindowManager();		var windowManager = new OO.ui.WindowManager();
	$(document.body).append(windowManager.$element);		$(document.body).append(windowManager.$element);

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 01:02, 19 August 2024

2024-08-19T01:02:04Z

← Older revision		Revision as of 01:02, 19 August 2024
Line 73:		Line 73:
	if (!articleId) continue;		if (!articleId) continue;

	item.addEventListener("click", () =>		item.style.cursor = "pointer";
	~~console.log("~~showArticle(item)")		item.addEventListener("click", () => showArticle(item));
	);
	}		}

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 01:01, 19 August 2024

2024-08-19T01:01:25Z

Show changes

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 01:00, 19 August 2024

2024-08-19T01:00:31Z

← Older revision		Revision as of 01:00, 19 August 2024
Line 71:		Line 71:
	for (const item of items) {		for (const item of items) {
	const { articleId } = item.dataset;		const { articleId } = item.dataset;
	if (!articleId) ~~return~~;		if (!articleId) continue;

	item.addEventListener("click", () =>		item.addEventListener("click", () =>

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 00:58, 19 August 2024

2024-08-19T00:58:57Z

← Older revision		Revision as of 00:58, 19 August 2024
Line 66:		Line 66:
	const items = content.querySelectorAll(".tpl-infopush-item");		const items = content.querySelectorAll(".tpl-infopush-item");
	const total = items.length;		const total = items.length;

			console.log("Template:MainPageInfopush", infopush, items);

	for (const item of items) {		for (const item of items) {
Line 71:		Line 73:
	if (!articleId) return;		if (!articleId) return;

	item.addEventListener("click", () => showArticle(item));		item.addEventListener("click", () =>
			console.log("showArticle(item)")
			);
	}		}

Line 108:		Line 112:
	resetAutoAdvance();		resetAutoAdvance();
	showSlide(0);		showSlide(0);

	~~console.log("Template:MainPageInfopush", infopush, items);~~
	} catch (reason) {		} catch (reason) {
	console.warn(		console.warn(

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 00:57, 19 August 2024

2024-08-19T00:57:41Z

← Older revision		Revision as of 00:57, 19 August 2024
Line 57:		Line 57:
	// }		// }

	~~for (~~const ~~infopush of~~ document.querySelectorAll(".tpl-infopush")) {		const infopushes = document.querySelectorAll(".tpl-infopush");
			console.log("Template:MainPageInfopush", infopushes);

			for (const infopush of infopushes) {
	try {		try {
	const content = infopush.querySelector(".tpl-infopush-content");		const content = infopush.querySelector(".tpl-infopush-content");

Usr 578aa632-439b-4c41-9266-776323ba9ad2 at 00:55, 19 August 2024

2024-08-19T00:55:40Z

← Older revision		Revision as of 00:55, 19 August 2024
Line 106:		Line 106:
	showSlide(0);		showSlide(0);

	console.log(		console.log("Template:MainPageInfopush", infopush, items);
	"Template:MainPageInfopush",
	~~`Initialized~~ infopush ~~with ${total}~~ items.`
	);
	} catch (reason) {		} catch (reason) {
	console.warn(		console.warn(