https://bugzilla.wikimedia.org/show_bug.cgi?id=60178

--- Comment #12 from Bawolff (Brian Wolff) <bawolff...@gmail.com> ---
(In reply to comment #7)
> Just to answer some of the questions above and (hopefully) clear up some
> misconceptions:
> 
> 1) "Is Flow ready for a production wiki?"
> 
> It's been live on not one but 3 production wikis (mediawiki.org, testwiki,
> test2wiki) for over a month, so it's a little late for the rhetorical
> speculation :)
> 

Many would argue those aren't production wikis, but even if you consider them
to be - being enabled on a production wiki is not the same as being ready to be
enabled on a production wiki. So far in this bug MzMcBride has given quite a
compelling argument (imho) that the extension should get a security review
before being added to real wikis.

re comment 10
>including the capability to edit any page in the MediaWiki namespace of a wiki

The bug seems to be about being able to blank any page (Still quite concerning,
but not the same type of attack possibilities)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to