https://bugzilla.wikimedia.org/show_bug.cgi?id=40679

--- Comment #11 from Tyler Romeo <[email protected]> 2012-10-02 05:16:56 UTC 
---
The primary problem right now is that there exists a case where giving
PROTO_HTTPS to wfExpandUrl() does not give an HTTPS uri. This is a security
vulnerability, as well as the root for possible bugs. So the main question is:
why does wfExpandUrl do this, and what will happen if we change it?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to