Bug ID: 61432
           Summary: Wiki admins should be able to whitelist installed Lua
           Product: MediaWiki extensions
           Version: REL1_22 branch
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: Unprioritized
         Component: Scribunto
       Web browser: ---
   Mobile Platform: ---

The list of Lua libraries (and possibly, global functions) allowed to be
required by Lua modules should be configurable by administrators:

1) LuaSandbox should take this list from the PHP configuration file
luasandbox.ini. At present, it is hardcoded into luasandbox/library.c;
2) Scribunto should use a setting from LocalSettings.php not hardcoded in
Scribunto/engines/LuaCommon/lualib/package.lua, or wherever else it is hidden.

The default values for these can stay as they are (string, math, etc.) but the
final choice ought to belong to the admin.

You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to