https://bugzilla.wikimedia.org/show_bug.cgi?id=70824

--- Comment #1 from Kunal Mehta (Legoktm) <[email protected]> ---
Hmm, something else I thought of. Right now if a user enables a gadget "foo",
and a repo higher up in the precedence chain creates a gadget named "foo" as
well, the user will now get the JS/CSS from the new repo instead of what they
actually enabled. If we make the local repo highest priority, a local
gadget-manager could override popular global gadgets in this form to
hypothetically compromise accounts. Or something not so good.

Possible solution: Embed the repo name in the preference key, so that if the
source of a gadget changes, the user won't keep the same preference value.
Might be a bit confusing from a UX perspective.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to