search

whatwg / misc-server

Miscellaneous resources for the servers hosting *.whatwg.org domains
Other
23 stars 16 forks source link

Remove HotCat and UTCLiveClock gadgets from wiki.whatwg.org #119

Closed annevk closed 4 years ago

annevk commented 4 years ago

They fetch resources from wikimedia.org and mediawiki.org and privacy-policy-wise it's better if we have no third-party domains (third-party domain being any domain that is not part of whatwg.org (or whatpr.org, though that's best avoided generally too)).

GPHemsley commented 4 years ago

@annevk Note that as both of these are gadgets, they are able to be turned on and off at the user level (though they are currently enabled for everyone by default) and also that we can choose to edit them locally to not fetch external resources. Would either of these alternative options meet the privacy policy requirements?

GPHemsley commented 4 years ago

See: https://wiki.whatwg.org/wiki/Special:Gadgets https://wiki.whatwg.org/wiki/MediaWiki:Gadget-HotCat.js https://wiki.whatwg.org/wiki/MediaWiki:Gadget-UTCLiveClock.js

annevk commented 4 years ago

Given that we're mostly migrating content away from the wiki it's not clear to me it's worth the hassle, but yeah, disabling them by default is probably fine (or ensuring no external resources are fetched).

GPHemsley commented 4 years ago

Silly me, I could have done this a month ago. It's just a matter of editing a wiki page.

In any case, turned HotCat and UTCLiveClock off by default: https://wiki.whatwg.org/index.php?title=MediaWiki:Gadgets-definition&oldid=10315

GPHemsley commented 4 years ago

For future reference, the modrollback, revisionjumper, and ReferenceTooltips gadgets also should not be enabled by default because they have external references.

annevk commented 4 years ago

Thanks Gordon!