Page MenuHomeMiraheze

CSP whitelist request for www.desmos.com
Closed, ResolvedPublic

Description

gamedevwiki.miraheze.org

Please, add iframe extension (https://www.mediawiki.org/wiki/Extension:Iframe)
and the following configuration i can use desmos graphing tool as interactive embeddings in pages

$wgIframe['server']['desmos'] = [ 'scheme' => 'https', 'domain' => 'www.desmos.com' ];

Event Timeline

Hispano76 claimed this task.
Hispano76 subscribed.

Please use ManageWiki/extensions to enable Widgets instead if possible (see T2912#62481)

Please use ManageWiki/extensions to enable Widgets instead if possible (see T2912#62481)

I just tried and it doesn't allow me to use custom domain except next ones:

*.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com *.tile.openstreetmap.org *.freenode.net *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org *.cloudytheology.com i.imgur.com na.llnet.sims3store.cdn.ea.com cdn.discordapp.com m.media-amazon.com image.tmdb.org

In T4976#94665, @Xahon wrote:

Please use ManageWiki/extensions to enable Widgets instead if possible (see T2912#62481)

I just tried and it doesn't allow me to use custom domain except next ones:

*.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com *.tile.openstreetmap.org *.freenode.net *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org *.cloudytheology.com i.imgur.com na.llnet.sims3store.cdn.ea.com cdn.discordapp.com m.media-amazon.com image.tmdb.org

You need to inform us which site you want added and we’ll review.

In T4976#94665, @Xahon wrote:

Please use ManageWiki/extensions to enable Widgets instead if possible (see T2912#62481)

I just tried and it doesn't allow me to use custom domain except next ones:

*.miraheze.org *.wikimedia.org *.wikipedia.org *.wikibooks.org *.wiktionary.org *.wikiquote.org *.wikisource.org *.wikiversity.org *.wikinews.org *.wikivoyage.org *.mediawiki.org mediawiki.org *.wikidata.org wikidata.org *.wmflabs.org *.google.com *.gstatic.com *.addthis.com *.youtube.com *.youtube-nocookie.com maxcdn.bootstrapcdn.com twitter.com *.creativecommons.org images.uncyc.org www.mikrodev.com *.reviservices.com *.twitter.com www.sciencedaily.com *.googleapis.com *.twimg.com discordapp.com *.tile.openstreetmap.org *.freenode.net *.sorcery.net *.fontawesome.com *.a.wmflabs.org nenawiki.org *.cloudytheology.com i.imgur.com na.llnet.sims3store.cdn.ea.com cdn.discordapp.com m.media-amazon.com image.tmdb.org

You need to inform us which site you want added and we’ll review.

I want to add this site
https://www.desmos.com/api/v1.3/docs/index.html
either using javascript API or iframe

dross removed Hispano76 as the assignee of this task.
dross subscribed.

Still valid. Awaiting response from sysadmins.

Reception123 renamed this task from Add iframe extension and config to Add iframe extension and config [CSP whitelist request for www.desmos.com].Jan 11 2020, 09:13

@dross I am very sorry for the delay in answering. Is this still needed? And if so, could you please explain why adding this to our CSP is essential for the functioning of your wiki?

Reception123 claimed this task.

No response in more than two weeks. If this is still needed please feel free to reopen this task.

RhinosF1 renamed this task from Add iframe extension and config [CSP whitelist request for www.desmos.com] to CSP whitelist request for www.desmos.com.Sep 20 2020, 12:38
RhinosF1 removed Reception123 as the assignee of this task.
RhinosF1 removed a subscriber: Examknow.

Is this still needed?

I can confirm that this is still wanted.

And if so, could you please explain why adding this to our CSP is essential for the functioning of your wiki?

I am not original opener but can elaborate on this from my pov.

Desmos is a popular graphing tool in math community. It allows one to easily plot complicated graphs and is a great visualization tool for math-related content. It is superior to using images as it is easier to update and has some interactive capabilities. Allowing Desmos embeds will benefit math-related wikis.

Unknown Object (User) closed this task as Resolved.Oct 2 2020, 23:25
Unknown Object (User) claimed this task.
Unknown Object (User) moved this task from Pending answer to Backlog on the Configuration board.

Done