https://bugzilla.wikimedia.org/show_bug.cgi?id=61432
Bug ID: 61432
Summary: Wiki admins should be able to whitelist installed Lua
libraries
Product: MediaWiki extensions
Version: REL1_22 branch
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: Unprioritized
Component: Scribunto
Assignee: wikibugs-l@lists.wikimedia.org
Reporter: alex.mas...@gmail.com
CC: bjor...@wikimedia.org, tstarl...@wikimedia.org,
vasi...@gmail.com
Web browser: ---
Mobile Platform: ---
The list of Lua libraries (and possibly, global functions) allowed to be
required by Lua modules should be configurable by administrators:
1) LuaSandbox should take this list from the PHP configuration file
luasandbox.ini. At present, it is hardcoded into luasandbox/library.c;
2) Scribunto should use a setting from LocalSettings.php not hardcoded in
Scribunto/engines/LuaCommon/lualib/package.lua, or wherever else it is hidden.
The default values for these can stay as they are (string, math, etc.) but the
final choice ought to belong to the admin.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
