Last modified: 2014-02-17 02:23:59 UTC
The list of Lua libraries (and possibly, global functions) allowed to be required by Lua modules should be configurable by administrators: 1) LuaSandbox should take this list from the PHP configuration file luasandbox.ini. At present, it is hardcoded into luasandbox/library.c; 2) Scribunto should use a setting from LocalSettings.php not hardcoded in Scribunto/engines/LuaCommon/lualib/package.lua, or wherever else it is hidden. The default values for these can stay as they are (string, math, etc.) but the final choice ought to belong to the admin.