Last modified: 2014-02-17 02:23:59 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T63432, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 61432 - Wiki system admins should be able to whitelist installed Lua libraries
Wiki system admins should be able to whitelist installed Lua libraries
Status: UNCONFIRMED
Product: MediaWiki extensions
Classification: Unclassified
Scribunto (Other open bugs)
master
All All
: Low enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-02-16 09:08 UTC by Alexander Mashin
Modified: 2014-02-17 02:23 UTC (History)
6 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Alexander Mashin 2014-02-16 09:08:07 UTC
The list of Lua libraries (and possibly, global functions) allowed to be required by Lua modules should be configurable by administrators:

1) LuaSandbox should take this list from the PHP configuration file luasandbox.ini. At present, it is hardcoded into luasandbox/library.c;
2) Scribunto should use a setting from LocalSettings.php not hardcoded in Scribunto/engines/LuaCommon/lualib/package.lua, or wherever else it is hidden.

The default values for these can stay as they are (string, math, etc.) but the final choice ought to belong to the admin.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links