[Wikidata-bugs] [Maniphest] [Updated] T231855: Allow using relative paths in array config vars
ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.2; 2019-10-15). TASK DETAIL https://phabricator.wikimedia.org/T231855 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: ReleaseTaggerBot Cc: Jdforrester-WMF, Reedy, matthiasmullie, Aklapper, darthmon_wmde, JFishback_WMF, Dsharpe, DannyS712, Nandana, sbassett, Lahi, Gq86, Ramsey-WMF, GoranSMilovanovic, Jayprakash12345, QZanden, HJiang-WMF, LawExplorer, _jensen, rosalieper, dpatrick, MGChecker, Luke081515, Wikidata-bugs, aude, GWicke, Bawolff, Stype_and_Co.-WMF, DerHexer, Jalexander, Parent5446, Anomie, Grunny, MaxSem, csteipp, Mbch331, Rxy, Jay8g, Krenair, Legoktm, chasemp ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Updated] T231855: Allow using relative paths in array config vars
Maintenance_bot removed a project: Patch-For-Review. TASK DETAIL https://phabricator.wikimedia.org/T231855 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Maintenance_bot Cc: Reedy, matthiasmullie, Aklapper, darthmon_wmde, JFishback_WMF, Dsharpe, DannyS712, Nandana, sbassett, Lahi, Gq86, Ramsey-WMF, GoranSMilovanovic, Jayprakash12345, QZanden, HJiang-WMF, LawExplorer, _jensen, rosalieper, dpatrick, MGChecker, Luke081515, Wikidata-bugs, aude, GWicke, Bawolff, Stype_and_Co.-WMF, DerHexer, Jalexander, Parent5446, Anomie, Grunny, Jdforrester-WMF, MaxSem, csteipp, Mbch331, Rxy, Jay8g, Krenair, Legoktm, chasemp, Hook696, Daryl-TTMG, RomaAmorRoma, 0010318400, E.S.A-Sheild, Meekrab2012, joker88john, CucyNoiD, NebulousIris, Gaboe420, Versusxo, Majesticalreaper22, Giuliamocci, Adrian1985, Cpaulf30, Af420, Darkminds3113, Bsandipan, Lordiis, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, WSH1906, Lewizho99, Maathavan ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Updated] T231855: Allow using relative paths in array config vars
Reedy added a project: Security. Reedy added a comment. While I'm happy for allowing an array of paths (that makes perfect sense), the relative-ness does give cause for concern What's to stop a malicious extension reading arbitrary files from disk, and then doing whatever with them? TASK DETAIL https://phabricator.wikimedia.org/T231855 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Reedy Cc: Reedy, matthiasmullie, Aklapper, Hook696, Daryl-TTMG, RomaAmorRoma, 0010318400, E.S.A-Sheild, darthmon_wmde, JFishback_WMF, Dsharpe, Meekrab2012, joker88john, DannyS712, CucyNoiD, Nandana, NebulousIris, sbassett, Gaboe420, Versusxo, Majesticalreaper22, Giuliamocci, Adrian1985, Cpaulf30, Lahi, Gq86, Af420, Ramsey-WMF, Darkminds3113, Bsandipan, Lordiis, GoranSMilovanovic, Adik2382, Jayprakash12345, Th3d3v1ls, Ramalepe, Liugev6, QZanden, HJiang-WMF, LawExplorer, WSH1906, Lewizho99, Maathavan, _jensen, rosalieper, dpatrick, MGChecker, Luke081515, Wikidata-bugs, aude, GWicke, Bawolff, Stype_and_Co.-WMF, DerHexer, Jalexander, Parent5446, Anomie, Grunny, Jdforrester-WMF, MaxSem, csteipp, Mbch331, Rxy, Jay8g, Krenair, Legoktm, chasemp ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Updated] T231855: Allow using relative paths in array config vars
gerritbot added a project: Patch-For-Review. TASK DETAIL https://phabricator.wikimedia.org/T231855 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: gerritbot Cc: matthiasmullie, Aklapper, Hook696, Daryl-TTMG, RomaAmorRoma, 0010318400, E.S.A-Sheild, darthmon_wmde, joker88john, DannyS712, CucyNoiD, Nandana, NebulousIris, Gaboe420, Versusxo, Majesticalreaper22, Giuliamocci, Adrian1985, Cpaulf30, Lahi, Gq86, Af420, Ramsey-WMF, Darkminds3113, Bsandipan, Lordiis, GoranSMilovanovic, Adik2382, Jayprakash12345, Th3d3v1ls, Ramalepe, Liugev6, QZanden, LawExplorer, WSH1906, Lewizho99, Maathavan, _jensen, rosalieper, MGChecker, Wikidata-bugs, aude, Jdforrester-WMF, Mbch331, Jay8g, Krenair, Legoktm ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs