Hi,

On 12/15/20 3:49 PM, Jeffrey Walton wrote:

This is a new issue for us. We did not experience it in previous
versions of Mediawiki. I think the problem may be caused by this in
our maintenance script
(https://github.com/weidai11/website/blob/master/mediawiki/update-wiki.sh#L61):

     # Remove all test frameworks in production.
     IFS= find "$WIKI_DIR" -iname 'test*' -print | while read -r dir
     do
         rm -rf "$dir" 2>/dev/null
     done

We don't want the additional attack surface on a production server.
Would someone please advise how to remove the unwanted testing gear?

In addition to what John said, blindly deleting files based on their name probably isn't going to work out so well. For the most part, all test-related files should be limited to the tests/ directory, which can safely be removed. There will be some other stuff lying around like qunit.js, but I don't think it's worth trying to delete everything that isn't absolutely required.

-- Legoktm

_______________________________________________
MediaWiki-l mailing list
To unsubscribe, go to:
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to