TemplateStyles is a tool to enable complex styling of templates without administrator privileges.
- 1 How does it work?
- 2 What problems does it solve?
- 3 Is it safe?
- 4 What CSS rules are recognized?
- 5 What anti-abuse features are provided?
- 6 How were the decisions around TemplateStyles made?
- 7 Who is working on TemplateStyles?
- 8 Where do I report errors / ask for features?
- 9 Where can I see it in action?
- 10 See also
How does it work?
Editors can add
<templatestyles src="[some page]" /> to a page and the contents of
[some page] will be parsed as CSS, sanitized and loaded on pages where the
<templatestyles> tag is used (directly or by being used in a template that's being used in a page).
[some page] must have the
sanitized-css (Sanitized CSS) content model, which is the default for subpages in the Template namespace that end with
.css. The recommended usage pattern is to store the styles for
Template:Foo under a subpage like
[some page] lacks a namespace prefix, it defaults to the Template namespace. Thus, for example,
<templatestyles src="Foo/styles.css" /> will load
<templatestyles> tag should be placed before the content that is styled, e.g. at the top of the template, to avoid a potential flash of unstyled content if the page is partially rendered while being loaded.
What problems does it solve?
Traditionally, there are two ways to style templates (or any other content): by using inline styles (that is, using HTML code and adding attributes like
style="margin: 10px" to it) or by using certain special system messages such as MediaWiki:Common.css. Neither of those approaches work very well.
For inline styling:
- There is no separation of content and presentation. In cases where the content does not come from a template (e.g. tables in articles), that will result in article wikitext that's unintelligible for most editors.
- Since styles are mixed with wikitext, syntax highlighting and other forms of CSS editing support are difficult or impossible.
- Styles have to be repeated for each HTML element they apply to, which results in lots of copy-pasting and code that is hard to read and maintain.
- Style attributes are limited to a subset of CSS. Most importantly,
@mediarules needed for responsive design do not work so it's impossible to make templates that work well over a wide range of screen sizes. Furthermore, inline styles take precedence over CSS stylesheets so user-, skin- or device-specific customizations become more difficult.
- Editing is limited to administrators, which is a major barrier to participation.
- Editing restrictions cannot be lifted as there is no way to limit what CSS rules can be used, and some of them could be abused to track readers' IP addresses or even execute scripts in some older browsers.
- Changes are impossible to test without saving first (task T112474).
- All stylesheets must be loaded on all pages (whether they actually use the page or not), which wastes bandwidth and makes debugging style rules harder.
TemplateStyles allows editors to associate style rules to specific pages, provides the full power of CSS stylesheets while filtering dangerous constructs, and works with preview/debug tools (such as TemplateSandbox) as expected.
Lowering the access and maintainability barrier will hopefully result in more innovation in the way templates are visually designed, less maintenance overhead, and better adaptability to screen options (especially mobile devices which by now constitute half of Wikipedia pageviews).
Is it safe?
Yes! TemplateStyles includes a full-fledged CSS parser that reads, re-serializes and escapes all code and removes CSS rules which do not match its whitelist. The parser is sufficiently fine-grained to reject remote resources (such as background images) but allow local ones. CSS selectors are rewritten so that they cannot refer to elements outside article content. (Visually modifying areas outside article content by displacing parts of the article, e.g. via absolute positioning, is not prevented at this time. This is no change from the status quo, as such a thing was already possible with wikitext and inline styles.)
What CSS rules are recognized?
Currently, TemplateStyles accepts most CSS3 properties supported by one or more major browser (as of early 2017). Beyond simple rules,
@font-feature-values at-rules are also supported (with font-face restricted to fonts whose name starts with
TemplateStyles, for security reasons).
Non-standard properties (including vendor prefixes) are not currently supported. See T162379 for plans.
What anti-abuse features are provided?
The design choice to store CSS in separate pages was made in part to make integration with the standard anti-abuse toolset easy. TemplateStyles CSS pages have their own content model (
sanitized-css) so changes to them can be tracked or controlled with AbuseFilter, using the
CSS inclusion is tracked the same way as template transclusion, so you can see where a stylesheet is used via the "What links here" option, see what stylesheets are used on a page under "Page information" (and possibly on the edit screen, depending on what editor you use), and see what recent changes might be affecting a page using "Related changes".
TemplateStyles also leaves identifying information in the HTML code; to find out where a specific rule comes from, look at the page source, and the enclosing
<style> tag will have an attribute like
data-mw-deduplicate="TemplateStyles:r123456", where 123456 is the revision ID of the stylesheet (viewable with Special:Diff, for example).
How were the decisions around TemplateStyles made?
Who is working on TemplateStyles?
TemplateStyles was originally a project of the Wikimedia Reading Infrastructure team (preceded by exploratory work Coren did as a volunteer), then people moved around. It is now maintained by an ad hoc WMF team consisting of Brad Jorsch (developer), Chris Koerner (community liaison), Dan Garry (product manager), Gergő Tisza (developer) and Grace Gellerman (project manager).
Where do I report errors / ask for features?
Where can I see it in action?
You can look at some curated examples.
The feature is currently (as of March 2018) enabled on the following Wikimedia sites:
- here on mediawiki.org (all stylesheets)
- German Wikipedia (all stylesheets)
- Swedish Wikipedia (all stylesheets)
- Wikitech (all stylesheets)
- testwiki (all stylesheets)