https://bugzilla.wikimedia.org/show_bug.cgi?id=40832

Jesús Martínez Novo (Ciencia Al Poder) <martinezn...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |martinezn...@gmail.com

--- Comment #4 from Jesús Martínez Novo (Ciencia Al Poder) 
<martinezn...@gmail.com> ---
Erwin: Your URL is absolute on the URL scheme, but not on the filesystem. That
path doesn't exist on the filesystem.

It may work if enabled (I highly doubt @embed even attempts to find the file on
the local filesystem on either gadgets or skin and user CSS) but that would be
tricky, since it should be relative to the current file, and those are wiki
pages, not files.

We may assume they should be relative to the MediaWiki installation path, but
such feature may be a security breach. Imagine this code:

#soemthing {
  /* @embed */ background-image: url(LocalSettings.php);
}

Or whatever file that may contain sensitive information or passwords.

For that reason I think support for embedding local files on any resource that
can be modified by a user (even sysops) is not feasible and shouldn't be
supported at all.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to