https://bugzilla.wikimedia.org/show_bug.cgi?id=61115

Fomafix <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |---
     Ever confirmed|0                           |1

--- Comment #4 from Fomafix <[email protected]> ---
(In reply to Amir E. Aharoni from comment #3)
> I find the setlang parameter useful and I don't see any convincing reason to
> remove it. I don't consider its availability a problem. It is useful to
> force a language using a parameter.

setlang is a security risk. Here is a demonstrator for this risk:
https://bugzilla.wikimedia.org/attachment.cgi?id=14788

uselang allows to force a language using a parameter without a risk.

(In reply to Amir E. Aharoni from comment #3)
> Replacing its use in some places, such as mw.uls.changeLanguage() can be
> considered, but it should not be removed entirely.

In https://gerrit.wikimedia.org/r/110360 is a implementation for
mw.uls.changeLanguage() with the same functionality without setlang. Other uses
of setlang can also changed on this way.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to