https://bugzilla.wikimedia.org/show_bug.cgi?id=68776

--- Comment #3 from Nathan Larson <[email protected]> ---
Perhaps ViewFiles could be made smart enough to tell whether sensitive
configuration settings, e.g. $wgDBpassword, are exposed in the config file. It
could look for, e.g., the string $wgDBpassword = "

If that string is present, then it could, by default, not allow the file to be
viewed. Alternatively, there could be a config setting, $wgViewFilesEnabled,
that would by default be set to false.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to