GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Collection
  • Workboard
  • Open Tasks
  • Members
  • Manage
  • Krenair (Alex Monk)
  • cscott (C. Scott Ananian)
  • saper (Marcin Cieślak)
  • Nemo_bis (Nemo)
  • Tacsipacsi
  • Pppery (Perry Olum)
  • Akuckartz (Andreas Kuckartz)
  • MJL (MJL)
  • Nakohdo

This view

  • Original page
  • New address

GeezerVison is showing phabricator.wikimedia.org — Collection

Page MenuHomePhabricator
Log In
  • Profile picture
  • Collection
  • Workboard
  • Open Tasks
  • Members
  • Manage
Projects Collection

CollectionComponent
ActivePublic
Watch Project

Members (4)

  • Krenair (Alex Monk)
    • Wikimedia volunteer
  • cscott (C. Scott Ananian)
    • Parser whisperer
  • saper (Marcin Cieślak)
    • Spy
  • Nemo_bis (Nemo)
    • User
  • View All

Watchers (6)

  • Tacsipacsi
    • User
  • Pppery (Perry Olum)
    • Volunteer Bugwrangler
  • Akuckartz (Andreas Kuckartz)
    • Stakeholder
  • MJL (MJL)
    • User
  • Nakohdo
    • User
  • Jay8g
    • User
  • View All

Details

Source Repo
https://gerrit.wikimedia.org/g/mediawiki/extensions/Collection
Description

The Collection extension provides users with the ability create books of wiki pages.

See Documentation on mediawiki.org.

Recent Activity
View All

Thu, Nov 5

Krenair removed a watcher for Collection: Krenair.
Thu, Nov 5, 1:02 PM

Sat, Oct 31

Huji created T443118: CollectionPortletFormats should allow localization.
Sat, Oct 31, 1:37 PM · I18n, Collection

Mon, Oct 26

sbassett added a comment to T224922: Code Stewardship Review: Collection Extension.
In T224922#12468544, @saper wrote:

How long is the security issues list as of Oct 2026 https://phabricator.wikimedia.org/maniphest/query/xa3bDF3ygt2r/#R (I have no access)?

Mon, Oct 26, 5:32 PM · MW-1.43-notes (1.43.0-wmf.25; 2024-10-01), Collection, Code-Stewardship-Reviews

Sat, Oct 24

Novem_Linguae updated the task description for T224922: Code Stewardship Review: Collection Extension.
Sat, Oct 24, 1:20 AM · MW-1.43-notes (1.43.0-wmf.25; 2024-10-01), Collection, Code-Stewardship-Reviews
Novem_Linguae added a comment to T224922: Code Stewardship Review: Collection Extension.

https://phabricator.wikimedia.org/maniphest/query/MHdp4HitL5CV/#R would be a better search.

Sat, Oct 24, 1:20 AM · MW-1.43-notes (1.43.0-wmf.25; 2024-10-01), Collection, Code-Stewardship-Reviews
saper added a comment to T224922: Code Stewardship Review: Collection Extension.

How long is the security issues list as of Oct 2026 https://phabricator.wikimedia.org/maniphest/query/xa3bDF3ygt2r/#R (I have no access)?

Sat, Oct 24, 1:17 AM · MW-1.43-notes (1.43.0-wmf.25; 2024-10-01), Collection, Code-Stewardship-Reviews

Oct 9 2026

Jdlrobson-WMF moved T394566: Allow generation of books from a reading list from Incoming to Feature Requests on the FY252627 Reading Lists board.
Oct 9 2026, 12:38 AM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic

Sep 30 2026

Jdlrobson-WMF moved T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension from Incoming to Feature Requests on the FY252627 Reading Lists board.
Sep 30 2026, 10:46 PM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic
sbassett closed T321092: CVE-2026-103048 Open Redirect in Special:Book as Resolved.
Sep 30 2026, 7:43 PM · User-SomeRandomDeveloper, SecTeam-Processed, Vuln-OpenRedirect, Collection, Security, Security-Team
sbassett moved T321092: CVE-2026-103048 Open Redirect in Special:Book from Watching to Our Part Is Done on the Security-Team board.
Sep 30 2026, 7:42 PM · User-SomeRandomDeveloper, SecTeam-Processed, Vuln-OpenRedirect, Collection, Security, Security-Team
sbassett closed T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS as Resolved.
Sep 30 2026, 5:43 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
sbassett renamed T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS from Collection API permits session-seeded javascript URL XSS to CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.
Sep 30 2026, 4:25 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team

Sep 29 2026

Catrope renamed T321092: CVE-2026-103048 Open Redirect in Special:Book from Open Redirect in Special:Book to CVE-2026-103048 Open Redirect in Special:Book.
Sep 29 2026, 11:05 PM · User-SomeRandomDeveloper, SecTeam-Processed, Vuln-OpenRedirect, Collection, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346111 merged by jenkins-bot:

[mediawiki/extensions/Collection@REL1_43] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346111

Sep 29 2026, 7:51 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346110 merged by jenkins-bot:

[mediawiki/extensions/Collection@REL1_45] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346110

Sep 29 2026, 7:35 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346109 merged by jenkins-bot:

[mediawiki/extensions/Collection@REL1_46] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346109

Sep 29 2026, 7:04 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346107 merged by jenkins-bot:

[mediawiki/extensions/Collection@master] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346107

Sep 29 2026, 7:01 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346111 had a related patch set uploaded (by SBassett; author: SomeRandomDeveloper):

[mediawiki/extensions/Collection@REL1_43] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346111

Sep 29 2026, 7:00 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346110 had a related patch set uploaded (by SBassett; author: SomeRandomDeveloper):

[mediawiki/extensions/Collection@REL1_45] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346110

Sep 29 2026, 6:59 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a project to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS: Patch-For-Review.
Sep 29 2026, 6:59 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
gerritbot added a comment to T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.

Change #1346109 had a related patch set uploaded (by SBassett; author: SomeRandomDeveloper):

[mediawiki/extensions/Collection@REL1_46] SECURITY: Sanitize item URLs before using them in HTML

https://gerrit.wikimedia.org/r/1346109

Sep 29 2026, 6:59 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team
sbassett updated subscribers of T435822: CVE-2026-103443: Collection API permits session-seeded javascript URL XSS.
Sep 29 2026, 6:55 PM · SecTeam-Processed, User-SomeRandomDeveloper, Collection, Vuln-XSS, Security, Security-Team

Sep 24 2026

Jdlrobson-WMF added a comment to T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension.
In T394563#12362186, @Bugreporter wrote:

But previously Collection can store book configuration into user subpage and pages in Books namespace - which was widely used in English Wikipedia.

Sep 24 2026, 10:59 PM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic
Bugreporter added a comment to T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension.

But previously Collection can store book configuration into user subpage and pages in Books namespace - which was widely used in English Wikipedia.

Sep 24 2026, 10:45 PM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic
Jdlrobson-WMF added a comment to T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension.

What is missing here is (1) allow materialize such a book setting to a MediaWiki page; (2) make book creator a builtin ReadingLists feature so it can be used in 3rd party wikis.

Sep 24 2026, 6:02 PM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic
Bugreporter added a comment to T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension.
In T394563#12320851, @Jdlrobson wrote:

I have ported all the functionality plus a little more to https://books.wmcloud.org/
I have a gadget that also allows you to import reading lists into the tool.

What is missing?

Here is a book I made earlier:
https://books.wmcloud.org/?titles=Chapter%3Abirds|Bendire's%20thrasher|Black-chinned%20hummingbird|Black-tailed%20gnatcatcher|Cactus%20wren|Curve-billed%20thrasher|Gambel's%20quail|Gila%20woodpecker|Gilded%20flicker|Greater%20roadrunner|Harris's%20hawk|Ladder-backed%20woodpecker|Loggerhead%20shrike|Phainopepla|Pyrrhuloxia|Western%20screech%20owl|Chapter%3Aherpes|Common%20side-blotched%20lizard|Red-spotted%20toad|San%20Diego%20horned%20lizard|Sauromalus%20ater|Urosaurus%20ornatus|Western%20banded%20gecko|Zebra-tailed%20lizard|Chapter%3Aother|Arizona%20bark%20scorpion|Black-tailed%20jackrabbit|Collared%20peccary|Coyote|Paravaejovis%20spinigerus&wiki=en.wikipedia.org&name=Animals%20of%20Desert%20Botanical%20Garden%2C%20Arizona&desc=Animals%20to%20look%20out%20for%20in%20Desert%20Botanical%20Garden%2C%20Arizona

Sep 24 2026, 6:00 PM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic

Sep 15 2026

Jdlrobson added a comment to T394563: [EPIC] Replicate Collection functionality in reading lists and sunset the extension.

I have ported all the functionality plus a little more to https://books.wmcloud.org/
I have a gadget that also allows you to import reading lists into the tool.

Sep 15 2026, 5:17 AM · FY252627 Reading Lists (Feature Requests), Collection, MediaWiki-extensions-ReadingLists, Epic

Sep 9 2026

Krinkle closed T436054: Remove $wgVirtualRestConfig from MediaWiki as Resolved.
Sep 9 2026, 4:41 AM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting

Sep 8 2026

ReleaseTaggerBot edited projects for T436054: Remove $wgVirtualRestConfig from MediaWiki, added: MW-1.47-notes (1.47.0-wmf.20; 2026-09-15); removed MW-1.47-notes (1.47.0-wmf.19; 2026-09-08).
Sep 8 2026, 6:00 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
Maintenance_bot removed a project from T436054: Remove $wgVirtualRestConfig from MediaWiki: Patch-For-Review.
Sep 8 2026, 5:31 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Change #1334028 merged by jenkins-bot:

[mediawiki/core@master] Remove unused $wgVirtualRestConfig

https://gerrit.wikimedia.org/r/1334028

Sep 8 2026, 5:30 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting

Sep 3 2026

pmiazga moved T436425: Investigate possible behavior change in SessionManager from Essential Work to In Progress on the MediaWiki-Core-Platform-Team (Kanban) board.
Sep 3 2026, 1:45 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error
pmiazga edited projects for T436425: Investigate possible behavior change in SessionManager, added: MediaWiki-Core-Platform-Team (Kanban); removed MediaWiki-Core-Platform-Team.
Sep 3 2026, 1:44 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error

Sep 2 2026

Stashbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Mentioned in SAL (#wikimedia-operations) [2026-09-02T22:04:53Z] <krinkle@deploy1003> Finished scap sync-world: Backport for [[gerrit:1334068|Extract MathJax DOM filter into a separate file (T435274)]], [[gerrit:1334070|Respect contextual binomial sizing (T434477 T418144 T401718)]], [[gerrit:1334032|Remove the last vestiges of $wgVirtualRestConfig (T436054)]] (duration: 14m 14s)

Sep 2 2026, 10:05 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
Stashbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Mentioned in SAL (#wikimedia-operations) [2026-09-02T21:54:57Z] <krinkle@deploy1003> krinkle: Backport for [[gerrit:1334068|Extract MathJax DOM filter into a separate file (T435274)]], [[gerrit:1334070|Respect contextual binomial sizing (T434477 T418144 T401718)]], [[gerrit:1334032|Remove the last vestiges of $wgVirtualRestConfig (T436054)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Sep 2 2026, 9:55 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
Stashbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Mentioned in SAL (#wikimedia-operations) [2026-09-02T21:50:39Z] <krinkle@deploy1003> Started scap sync-world: Backport for [[gerrit:1334068|Extract MathJax DOM filter into a separate file (T435274)]], [[gerrit:1334070|Respect contextual binomial sizing (T434477 T418144 T401718)]], [[gerrit:1334032|Remove the last vestiges of $wgVirtualRestConfig (T436054)]]

Sep 2 2026, 9:50 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Change #1334032 merged by jenkins-bot:

[operations/mediawiki-config@master] Remove the last vestiges of $wgVirtualRestConfig

https://gerrit.wikimedia.org/r/1334032

Sep 2 2026, 9:49 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Change #1334032 had a related patch set uploaded (by Krinkle; author: Krinkle):

[operations/mediawiki-config@master] Remove the last vestiges of $wgVirtualRestConfig

https://gerrit.wikimedia.org/r/1334032

Sep 2 2026, 8:12 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a project to T436054: Remove $wgVirtualRestConfig from MediaWiki: Patch-For-Review.
Sep 2 2026, 8:03 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Change #1334028 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/core@master] Remove unused $wgVirtualRestConfig

https://gerrit.wikimedia.org/r/1334028

Sep 2 2026, 8:03 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
Maintenance_bot removed a project from T436425: Investigate possible behavior change in SessionManager: Patch-For-Review.
Sep 2 2026, 5:31 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error
Maintenance_bot removed a project from T436054: Remove $wgVirtualRestConfig from MediaWiki: Patch-For-Review.
Sep 2 2026, 5:31 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
Krinkle updated the task description for T436054: Remove $wgVirtualRestConfig from MediaWiki.
Sep 2 2026, 5:07 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
ReleaseTaggerBot added a project to T436425: Investigate possible behavior change in SessionManager: MW-1.47-notes (1.47.0-wmf.19; 2026-09-08).
Sep 2 2026, 5:00 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error
ReleaseTaggerBot added a project to T436054: Remove $wgVirtualRestConfig from MediaWiki: MW-1.47-notes (1.47.0-wmf.19; 2026-09-08).
Sep 2 2026, 5:00 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436054: Remove $wgVirtualRestConfig from MediaWiki.

Change #1329425 merged by jenkins-bot:

[mediawiki/extensions/Collection@master] Remove last remnant of $wgVirtualRestConfig

https://gerrit.wikimedia.org/r/1329425

Sep 2 2026, 4:34 PM · MediaWiki-Core-Platform-Team, MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Collection, RESTBase-Sunsetting
gerritbot added a comment to T436425: Investigate possible behavior change in SessionManager.

Change #1332092 merged by jenkins-bot:

[mediawiki/extensions/Collection@master] phpunit: Unbreak CI after apparent SessionManager changes

https://gerrit.wikimedia.org/r/1332092

Sep 2 2026, 4:34 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error

Aug 31 2026

Tgr added a comment to T436425: Investigate possible behavior change in SessionManager.

The test stores $session = SessionManager::getGlobalSession(); and then makes calls that change the session data. The test relies on $session['mykey'] returning the current data, but it seems to instead return the data as it was when the object was acquired.

Aug 31 2026, 9:05 PM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error
siebrand changed the subtype of T114578: Make Translate and Collection extensions compatible from "Task" to "Bug Report".
Aug 31 2026, 2:03 PM · MediaWiki-extensions-Translate, Collection

Aug 29 2026

gerritbot added a project to T436425: Investigate possible behavior change in SessionManager: Patch-For-Review.
Aug 29 2026, 5:32 AM · MediaWiki-Core-Platform-Team (Kanban), MW-1.47-notes (1.47.0-wmf.19; 2026-09-08), MediaWiki-Core-AuthManager, Collection, ci-test-error
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.