Page MenuHomePhorge
Feed All Stories

May 2 2025

valerio.bozzolan added a comment to D25984: Catch exception when a renderer freaks out.

Should we phlog($e) in your opinion?

May 2 2025, 15:20
valerio.bozzolan added a comment to F3890722: D25902-ab-check.png.

Obtained with:

May 2 2025, 15:20
valerio.bozzolan changed the visibility for F3890722: D25902-ab-check.png.
May 2 2025, 15:20
avivey renamed 2025.18 from Next Up to 2025.18.
May 2 2025, 15:19
avivey edited the content of Change Log.
May 2 2025, 15:19
avivey requested review of D25984: Catch exception when a renderer freaks out.
May 2 2025, 10:07
valerio.bozzolan moved T16005: Remove unused table code in ManiphestReportController::renderBurn() from Backlog to Triage on the Wikimedia Hackathon 2025 board.
May 2 2025, 07:35 · Wikimedia Hackathon 2025
valerio.bozzolan accepted D25501: Feed: Do not query and display data of uninstalled applications.

(double-slam-accept)

May 2 2025, 07:15
mainframe98 accepted D25501: Feed: Do not query and display data of uninstalled applications.
May 2 2025, 05:36

May 1 2025

aklapper added a project to D25749: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed(): Wikimedia Hackathon 2025.
May 1 2025, 22:57 · Wikimedia Hackathon 2025, Almanac/Drydock/Harbormaster
aklapper closed D25749: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed().
May 1 2025, 22:56 · Wikimedia Hackathon 2025, Almanac/Drydock/Harbormaster
aklapper committed rPee9991d3c995: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed().
May 1 2025, 22:56
aklapper added a comment to D25749: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed().

I am excited to announce that I personally watched @valerio.bozzolan crash Harbormaster's build and then load this awesome code into his PC computer machine and then repeat Harbormaster's build and then Harbormaster's build did not crash anymore. Therefore we decided that this awesome code is very good and as a courtesy to every Harbormaster out there will be made available for free, without any charge.

May 1 2025, 22:56 · Wikimedia Hackathon 2025, Almanac/Drydock/Harbormaster
valerio.bozzolan updated the test plan for D25749: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed().
May 1 2025, 22:29 · Wikimedia Hackathon 2025, Almanac/Drydock/Harbormaster
valerio.bozzolan accepted D25749: Fix call to undefined HarbormasterBuildMessageRestartTransaction::isFailed().

Tested in my production 🤩 fail before, works after, thanks lol

May 1 2025, 22:27 · Wikimedia Hackathon 2025, Almanac/Drydock/Harbormaster
valerio.bozzolan added a project to T15689: built in exception display is missing top line: Wikimedia Hackathon 2025.
May 1 2025, 22:11 · Wikimedia Hackathon 2025, Phorge Development Tools
valerio.bozzolan added a project to T15564: Allow yourself to be Invited in Imported Events: Wikimedia Hackathon 2025.
May 1 2025, 22:08 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Calendar
valerio.bozzolan moved T15859: Set "preconnect" HTTP header when "security.alternate-file-domain" is set from Backlog to Plz Review 🥺 on the Wikimedia Hackathon 2025 board.
May 1 2025, 21:57 · Wikimedia Hackathon 2025, Feature Requests
valerio.bozzolan added a project to T15859: Set "preconnect" HTTP header when "security.alternate-file-domain" is set: Wikimedia Hackathon 2025.
May 1 2025, 21:57 · Wikimedia Hackathon 2025, Feature Requests
valerio.bozzolan added a comment to D25694: Set "preconnect" HTTP header when "security.alternate-file-domain" is set.

(Plus, a domain 0 is nonsense, so the well-known PHP pitfall of if($something) is excluded here - double-slam-accept)

May 1 2025, 21:56
valerio.bozzolan accepted D25694: Set "preconnect" HTTP header when "security.alternate-file-domain" is set.

I'm not sure it matters for now as Phorge does not seem to accept non-ascii domains anyway (with a confusing error message):

[acko@fedora phorge (T15859preFetch *$|u+1)]$ ./bin/config set "security.alternate-file-domain" "https://苗条.example.com"
Usage Exception: Config option 'security.alternate-file-domain' is invalid. The URI must start with 'http://' or 'https://'.
[acko@fedora phorge (T15859preFetch *$|u+1)]$ ./bin/config set "security.alternate-file-domain" "https://áéexample.com"
Usage Exception: Config option 'security.alternate-file-domain' is invalid. The URI must start with 'http://' or 'https://'.
May 1 2025, 21:43
valerio.bozzolan created T16048: PhutilURI: add support for Internationalized domain name e.g. http://苗条.example.com/.
May 1 2025, 21:01 · Feature Requests
valerio.bozzolan updated the diff for D25501: Feed: Do not query and display data of uninstalled applications.

avoid to introduce a PHP 8 issue (thanks @mainframe98)

May 1 2025, 20:42
mainframe98 requested changes to D25501: Feed: Do not query and display data of uninstalled applications.
May 1 2025, 20:24
valerio.bozzolan added a project to T16005: Remove unused table code in ManiphestReportController::renderBurn(): Wikimedia Hackathon 2025.
May 1 2025, 20:23 · Wikimedia Hackathon 2025
valerio.bozzolan accepted D25983: CSS: Add "clip-path" to deprecated "clip" property.

I've done my best to try to understand what we are talking about, so, I've created a nonsense X grid made in this way to catch changes:

May 1 2025, 19:55
valerio.bozzolan renamed T15541: "arc browse <file>" should support Subversion from "arc browse <file>" does not support Subversion to "arc browse <file>" should support Subversion.
May 1 2025, 19:35 · Feature Requests, Wikimedia Hackathon 2025, User-valerio.bozzolan, Arcanist
valerio.bozzolan added a project to T15541: "arc browse <file>" should support Subversion: Wikimedia Hackathon 2025.
May 1 2025, 19:34 · Feature Requests, Wikimedia Hackathon 2025, User-valerio.bozzolan, Arcanist
valerio.bozzolan added a comment to D25501: Feed: Do not query and display data of uninstalled applications.

Be bold Andre, feel free to land 🚀

May 1 2025, 19:30
avivey updated the post content for Blog Post: DoS attack against Aphlict.
May 1 2025, 19:02 · Aphlict
valerio.bozzolan moved T16046: CSS: Add "clip-path" as progressive enhancement for deprecated "clip" property from Backlog to Plz Review 🥺 on the Wikimedia Hackathon 2025 board.
May 1 2025, 19:01 · Wikimedia Hackathon 2025
valerio.bozzolan added a project to T16046: CSS: Add "clip-path" as progressive enhancement for deprecated "clip" property: Wikimedia Hackathon 2025.
May 1 2025, 19:01 · Wikimedia Hackathon 2025
avivey edited the content of Next Up.
May 1 2025, 18:58
valerio.bozzolan placed T15225: Conpherence: add a dedicated "Send" button (not just the Enter key) up for grabs.

(Damn Phorge that auto-claims also for wontfix)

May 1 2025, 18:57 · Conpherence, Mobile, User-valerio.bozzolan, UX
avivey added a comment to T16047: Handle security issues in Aphlict.

Re "implement in php" - AFAICT, there's no built-in support for websockets in php, but I found at least 2 pure-php implementations out there that might work.

May 1 2025, 18:57 · Aphlict, Security
valerio.bozzolan closed T15225: Conpherence: add a dedicated "Send" button (not just the Enter key), a subtask of T15218: Conpherence: cannot type a newline from Android, as Wontfix.
May 1 2025, 18:56 · Conpherence, Mobile, User-valerio.bozzolan, UX
valerio.bozzolan closed T15225: Conpherence: add a dedicated "Send" button (not just the Enter key) as Wontfix.

Maybe we can wontfix this. The current "workaround" D25485 by @waldyrious is just great and effectively fixed the super-confusing root problem.

May 1 2025, 18:56 · Conpherence, Mobile, User-valerio.bozzolan, UX
avivey updated the task description for T16047: Handle security issues in Aphlict.
May 1 2025, 18:56 · Aphlict, Security
valerio.bozzolan added a project to T15202: Show confirmation dialog also when closing tab if content changed: Wikimedia Hackathon 2025.
May 1 2025, 18:54 · Wikimedia Hackathon 2025, Maniphest, User-valerio.bozzolan, UX
avivey created T16047: Handle security issues in Aphlict.
May 1 2025, 18:54 · Aphlict, Security
valerio.bozzolan raised the priority of T15918: When destroying a Project, all Sub-Projects are "You Shall Not Pass: Restricted Project" from Wishlist to Low.
May 1 2025, 18:52 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Bug Reports, Projects
valerio.bozzolan moved T15918: When destroying a Project, all Sub-Projects are "You Shall Not Pass: Restricted Project" from Backlog to Plz Review 🥺 on the Wikimedia Hackathon 2025 board.
May 1 2025, 18:51 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Bug Reports, Projects
valerio.bozzolan added a project to T15918: When destroying a Project, all Sub-Projects are "You Shall Not Pass: Restricted Project": Wikimedia Hackathon 2025.
May 1 2025, 18:51 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Bug Reports, Projects
valerio.bozzolan moved T16043: Create Unit Tests to cover Project Destroy from Backlog to Triage on the Wikimedia Hackathon 2025 board.
May 1 2025, 18:51 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Feature Requests, Projects
valerio.bozzolan added a project to T16043: Create Unit Tests to cover Project Destroy: Wikimedia Hackathon 2025.
May 1 2025, 18:51 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Feature Requests, Projects
valerio.bozzolan moved T15697: When deleting the last Sub-project, restore its Root Project from Backlog to Plz Review 🥺 on the Wikimedia Hackathon 2025 board.
May 1 2025, 18:50 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Projects
valerio.bozzolan added a project to T15697: When deleting the last Sub-project, restore its Root Project: Wikimedia Hackathon 2025.
May 1 2025, 18:50 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Projects
valerio.bozzolan closed T15886: Archived Projects: make them "more Archived" as Resolved.
May 1 2025, 18:49 · Projects
valerio.bozzolan assigned T15886: Archived Projects: make them "more Archived" to aklapper.

Thanks Andre who fixed all the sub-tasks and deserves all the glory here. I cannot imagine more things to be covered, so, boldly closing.

May 1 2025, 18:49 · Projects
valerio.bozzolan created Wikimedia Hackathon 2025.
May 1 2025, 18:45
avivey updated the post content for Blog Post: DoS attack against Aphlict.
May 1 2025, 18:43 · Aphlict
valerio.bozzolan added a comment to Blog Post: DoS attack against Aphlict.

Thanks. We can update the "We didn't yet release a fix on Phorge" and the "We'll release" since D25967 it's now fixed in master 👍

May 1 2025, 18:27 · Aphlict
avivey added a comment to Blog Post: DoS attack against Aphlict.
In J6#66, @Cigaryno wrote:

Thanks for this! Is this any related to the security vulnerability warning I got with npm install last month, which prompted me to run npm audit fix?

May 1 2025, 16:26 · Aphlict
Cigaryno awarded Blog Post: DoS attack against Aphlict a Like token.
May 1 2025, 14:51 · Aphlict
Cigaryno added a comment to Blog Post: DoS attack against Aphlict.

Thanks for this! Is this any related to the security vulnerability warning I got with npm install last month, which prompted me to run npm audit fix?

May 1 2025, 14:51 · Aphlict
aklapper added a comment to D25983: CSS: Add "clip-path" to deprecated "clip" property.

Testing welcome.
Input from CSS folks welcome.

May 1 2025, 12:28
aklapper requested review of D25983: CSS: Add "clip-path" to deprecated "clip" property.
May 1 2025, 12:27
aklapper added a revision to T16046: CSS: Add "clip-path" as progressive enhancement for deprecated "clip" property: D25983: CSS: Add "clip-path" to deprecated "clip" property.
May 1 2025, 12:27 · Wikimedia Hackathon 2025
aklapper added a comment to T16046: CSS: Add "clip-path" as progressive enhancement for deprecated "clip" property.

From a quick look it seems that clip: rect(0 0 0 0) is very much the same as clip: rect(1px, 1px, 1px, 1px) (make things invisible and only found by screenreaders), and clip-path: inset(50%) (covering each side by 50%) is very much the same outcome as clip-path: inset(100%).

May 1 2025, 12:24 · Wikimedia Hackathon 2025
aklapper created T16046: CSS: Add "clip-path" as progressive enhancement for deprecated "clip" property.
May 1 2025, 12:01 · Wikimedia Hackathon 2025
aklapper edited the content of Next Up.
May 1 2025, 11:01
aklapper closed D25972: Remove non-existing min-device-pixel-ratio CSS syntax.
May 1 2025, 10:59
aklapper committed rPb578854017fc: Remove non-existing min-device-pixel-ratio CSS syntax.
May 1 2025, 10:59
aklapper edited the content of Next Up.
May 1 2025, 10:43
aklapper edited the content of Next Up.
May 1 2025, 10:42
aklapper edited the content of 2024 week 35.
May 1 2025, 10:40
aklapper closed T16037: Bump ws npm package for Aphlict as Resolved by committing rPde2b53638299: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.
May 1 2025, 10:38 · Security, Aphlict
aklapper closed D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.
May 1 2025, 10:38
aklapper committed rPde2b53638299: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.
May 1 2025, 10:38
aklapper added a comment to D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.

@aklapper want to land this?

May 1 2025, 10:38
avivey created Blog Post: DoS attack against Aphlict.
May 1 2025, 08:04 · Aphlict
avivey triaged T16037: Bump ws npm package for Aphlict as High priority.

Possible ways to reduce risk for future issues:

  • add a Setup Check that runs npm audit
  • remove node, use php-based websocket implementation
May 1 2025, 07:49 · Security, Aphlict
avivey added a comment to D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.

@aklapper want to land this?
I figure users need to just run npm audit fix to be safe, and then fix the mess it did on the git diff.

May 1 2025, 07:20
avivey edited projects for Security Announcements, added: Security; removed phorge.it install.
May 1 2025, 07:16 · Security

Apr 30 2025

aklapper added a comment to D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.

Ah...I may take another look (jmeador: Feel of course also very free to commandeer this back to you)

Apr 30 2025, 16:42 · Differential
valerio.bozzolan added inline comments to D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.
Apr 30 2025, 16:35 · Differential
aklapper retitled D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs from Fix responsible authors in DifferentialRevisionQuery to Make responsible authors in DifferentialRevisionQuery only include users.
Apr 30 2025, 16:32 · Differential
aklapper added a comment to D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.

Ah sorry for maybe stepping on toes, and welcome back! :)

Apr 30 2025, 16:31 · Differential
jmeador accepted D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.
Apr 30 2025, 16:21 · Differential
aklapper updated the diff for D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.

Seems @jmeador is AWOL thus updating per last comment

Apr 30 2025, 16:01 · Differential
aklapper commandeered D25676: DifferentialRevisionQuery: avoid nonsense query comparing r.authorPHID with project PHIDs.

seems @jmeador is AWOL thus boldly commandeering

Apr 30 2025, 15:59 · Differential
aklapper renamed T16044: Diviner: All Method and File query results have invalid 404 URIs from Diviner: All Method query results have invalid 404 URIs to Diviner: All Method and File query results have invalid 404 URIs.
Apr 30 2025, 15:31
aklapper added a comment to T16044: Diviner: All Method and File query results have invalid 404 URIs.

Digging a bit further, rP600a3e3b7c2de5d93644e0410cd354ea6752949d implies that methods and files should not be indexed at all and not show up in the results. See also T16045#21931.

Apr 30 2025, 15:30
aklapper added a comment to T16045: All @{method:...} links in Diviner docs result in a "Documentation Not Found" error.

A quick fix would be removing the single line $query->withIsDocumentable(true); in https://we.phorge.it/source/phorge/browse/master/src/applications/diviner/controller/DivinerFindController.php;85f51c54303fe50ebc09ee0b652033a8a9f29ab1$45
as that'll allow results for Methods.

Apr 30 2025, 14:58
aklapper edited the content of Next Up.
Apr 30 2025, 14:39
aklapper renamed T16044: Diviner: All Method and File query results have invalid 404 URIs from Diviner: All Method query results have invalid URIs to Diviner: All Method query results have invalid 404 URIs.
Apr 30 2025, 14:33
aklapper created T16045: All @{method:...} links in Diviner docs result in a "Documentation Not Found" error.
Apr 30 2025, 14:33
valerio.bozzolan awarded T16044: Diviner: All Method and File query results have invalid 404 URIs a Yellow Medal token.
Apr 30 2025, 14:28
aklapper added a revision to T16044: Diviner: All Method and File query results have invalid 404 URIs: D25812: Fix method search result URIs in Diviner.
Apr 30 2025, 14:27
aklapper updated the summary of D25812: Fix method search result URIs in Diviner.
Apr 30 2025, 14:27 · Diviner
aklapper created T16044: Diviner: All Method and File query results have invalid 404 URIs.
Apr 30 2025, 14:27
aklapper updated the diff for D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.

also manually bump version in package.json; then running npm install results in another bump in package-lock.json

Apr 30 2025, 10:50
aklapper added a comment to D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.

Both are good questions. I only put here the diff which npm created. First question: Very likely Yes.
(Note that I have no knowledge in this area and don't even know why both package-lock.json and package.json are needed.)

Apr 30 2025, 10:49
avivey added a comment to D25967: Aphlict: Bump NodeJS package ws from 7.5.0 to 7.5.10.
  1. Can we specify the .10 in packages.json itself?
  2. Do installs need upgrade instructions to complete the upgrade?
Apr 30 2025, 09:01
valerio.bozzolan moved T16043: Create Unit Tests to cover Project Destroy from Backlog to Code Sprint Candidate on the User-valerio.bozzolan board.
Apr 30 2025, 08:53 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Feature Requests, Projects
valerio.bozzolan added a project to T16043: Create Unit Tests to cover Project Destroy: User-valerio.bozzolan.
Apr 30 2025, 08:53 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Feature Requests, Projects
valerio.bozzolan created T16043: Create Unit Tests to cover Project Destroy.
Apr 30 2025, 08:52 · Wikimedia Hackathon 2025, User-valerio.bozzolan, Feature Requests, Projects
avivey added a comment to T15671: Allow to import Picture from Gravatar.

As a general rule, I prefer the have the abstractions as much as possible, to allow extensions to do things.
In this case, an abstraction would also make this feature easier to enable/disable, which I think is desired.

Apr 30 2025, 08:50 · User-valerio.bozzolan, People
aklapper closed D25979: Fix invalid return values for void.
Apr 30 2025, 06:50
aklapper committed rPc51002398d63: Fix invalid return values for void.
Apr 30 2025, 06:50