What are Mediawiki views on providing links in their Extension pages which point to an virus/malware infected site? This Dynamic Page List 3rd party extension, http://www.mediawiki.org/wiki/Extension:DynamicPageList_(third-party) is flagged as a major security risk by Mediawiki. Which oddly is proven because the links on the Extension page to the DPL 3rd Party's Manual, off the Mediawiki site, is infected with a virus! O My virus software blocked it, AVG's online scanner shows it, and the site is on a blacklist on another online URL virus scanning tool. I made an edit noting the links are infected, but it is waiting for approval from a Mediawiki admin.

Of course, I am pointing this out to a wiki admin who is using this Extension on a documentation wiki to drop this version of DPL and use the Foundation's version, but I think this brings up a discussion about Extensions flagged as a security risk and why the extension's code is still available for download? Not only from SVN, but older versions from the infected site itself. The last update to the extension was 10-1-2009, so I would say it has been abandoned by the developers. If this is the case, should the download links be removed?

Tom

_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to