[00:20:29] <MirahezeRelay>	 <abaddriverlol> is anybody able to look at <https://issue-tracker.miraheze.org/T13684>? seems like SMW is broken on their wiki, DBQueryErrors on category pages and Special:Preferences, RuntimeExceptions on Special:Statistics and a few other special pages
[00:44:05] <MirahezeRelay>	 <abaddriverlol> lol, nice
[06:27:48] <MirahezeRelay>	 <blankeclair> MirahezeLogBot is down
[06:27:49] <MirahezeRelay>	 <blankeclair> fun
[06:30:34] <RhinosF1>	 BlankEclair: morning and fixed
[06:30:38] <BlankEclair>	 ty :3
[15:46:18] <MirahezeRelay>	 <abaddriverlol> does a domain need a review for adding it to `frame-src` in the CSP if it's already allowed in `media-src`?
[15:47:10] <MirahezeRelay>	 <abaddriverlol> specifically, this is about <https://issue-tracker.miraheze.org/T13677> which can be fixed by adding `clips.twitch.tv` to `frame-src`, but I'm not sure whether I should make a PR for adding it or wait for a CSP review
[15:48:12] <MirahezeRelay>	 <originalauthority> Generally I would say yes personally, given a frame has more security risks than an image etc -- in this instance, Twitch can probably be added without an additional review since its Twitch, but cc @rhinosf1
[15:50:01] <MirahezeRelay>	 <rhinosf1> Yes
[15:50:43] <MirahezeRelay>	 <rhinosf1> Any change to the CSP should go through a security review
[15:50:54] <MirahezeRelay>	 <rhinosf1> They also need to be assessed for ongoing need
[15:51:04] <MirahezeRelay>	 <rhinosf1> As the list is getting too broad
[15:57:16] <MirahezeRelay>	 <abaddriverlol> alright, I added the CSP Review project to the task
[15:57:48] <MirahezeRelay>	 <abaddriverlol, replying to rhinosf1> makes sense, iirc it is sent to the client via a header, right?
[16:00:31] <MirahezeRelay>	 <rhinosf1, replying to abaddriverlol> Yup
[16:00:34] <MirahezeRelay>	 <rhinosf1> A very long header
[16:01:26] <MirahezeRelay>	 <abaddriverlol> ah
[16:01:35] <MirahezeRelay>	 <abaddriverlol> yeah that does not sound like it's optimal for performance
[16:08:17] <MirahezeRelay>	 <originalauthority> Headers are relatively cheap to add
[16:08:53] <MirahezeRelay>	 <originalauthority> Since they are added on the response and not the request, they do not slow down the http request
[16:09:15] <MirahezeRelay>	 <originalauthority> (And are also likely cached in haproxy so are not recomputed on every request)
[16:15:15] <MirahezeRelay>	 <abaddriverlol, replying to originalauthority> but is there really a difference for the user between a slower request or a slower response?
[18:25:32] <MirahezeRelay>	 <rodejong> [1/2] https://discord.com/channels/407504499280707585/1372259915468505168/1372259915468505168
[18:25:33] <MirahezeRelay>	 <rodejong> [2/2] Could a techie help out?
[23:00:13] <MirahezeRelay>	 <rodejong> https://www.mediawiki.org/wiki/Extension:Tabs seems incompatible with MW1.42 and higher. Should Tabs be removed?
[23:22:37] <BlankEclair>	 anything to do for https://issue-tracker.miraheze.org/T13688? cert is setup in cloudflare, and miraheze/{ssl,dns} are also already updated
[23:32:06] <BlankEclair>	 re Extension:Tabs: there's work to make it work: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Tabs/+/1125639
[23:52:32] <MirahezeRelay>	 <pixldev, replying to BlankEclair> Probably restrict deployment til that’s up streamed
[23:54:40] <BlankEclair>	 i am not a fan of phan
[23:59:50] <MirahezeRelay>	 <pixldev, replying to BlankEclair> Phan has fans?