[05:23:16] Is there a way to publicly see which groups have which permissions? Or is that only available to see in LocalSettings.php? [05:42:40] ryzenda: Check your special:ListGroupRights page [06:57:05] Damn, DarkVector skin/theme is annoying as fuck, using !important in so many of the css declarations, lol, how is this acceptable? [12:04:18] Does anyone have any ideas on https://phabricator.wikimedia.org/T303678#7771825 [12:13:02] RhinosF1: i vaguely remember some RCE in svg recently? maybe there was a fix applied to prevent that [12:20:28] buZz: do you know what exact package [12:20:46] Might make it easier to find on Sal when it was updated [12:20:59] might have been in ghostscript? but there's been many RCEs through the years in 'server side SVG rendering' [12:21:06] mostly around XSS? [12:23:15] Don't see anything !log's for Ghostscript since Jan 10 [12:23:44] https://sal.toolforge.org/production?p=0&q=security&d= [12:23:59] is recent ones [12:25:36] There is a bug in /extensions/Echo/modules/ui/mw.echo.ui.ActionMenuPopupWidget.js - Every time I open and close the "Your alerts" menu dialog (bell icon), the div.mw-echo-ui-NotificationBadgeWidget-overlay-menu gets appended to with the same content that already was previously appended to during previous clicks. [12:27:59] ryzenda: Does it happen on any page or only on a particular page? An imbalanced HTML structure can cause weird bugs like this [12:32:33] Vulpix, I tested on the home page and another page,and same issue [12:33:14] The JavaScript code looks like it's easy to spot the issue at quick glance [12:33:39] e.g. no if condition to determine if the append elements are already appended previously [19:17:54] At the end of LocalSettings.php, after a bunch of wfLoadSkin and wfLoadExtension calls, var_dump($wgResourceModules); shows empty array. Where can I inspect the vaalue of php variables later in execution when the variables are fully populated? [19:20:35] eval.php [20:03:54] ryzenda: FWIW, wfLoadExtension basically queues them to be loaded, it doesn't actually load them then [21:41:13] https://mediawiki.org/wiki/Manual:$wgResourceModuleSkinStyles is confusing. In LocalSettings.php, I'm trying to set $wgResourceModules['skins.vectors.styles']['styles'] = array('resources/common/mycustomcss.less');$wgResourceModuleSkinStyles['vector']['noideawhattoputhere'] = ...; trying to figure out a basic way to load a css file that sets "display: none;" on everything, just so I can first find a working solution that I [21:41:13] can load a css script as defined in LocalSettings.php for a particular skin. [22:00:28] ryzenda: look at https://www.mediawiki.org/wiki/Snippets/Load_an_additional_JavaScript_or_stylesheet_file_on_all_pages [22:02:38] ah that's perfect! thanks! [23:24:12] hmmm, https://dev.moasspedia.org/wiki/Main_Page the page shows white background for a second before changing to black. Is there a a hook sooner than BeforePageDisplay to inject css that doesn't have delay in rendering the page to reach that css? [23:25:21] MediaWiki:Vector.css seems to load before the BeforePageDisplay hook [23:26:28] reading about SkinPreloadExistence [23:31:39] awww SkinTemplateOutputPageBeforeExec is deprecated, but seems like convenient timing if it still existed