-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Daniel Cannon wrote:
A note to readers who use the API on their own MediaWiki installs and to MediaWiki extension developers: This will be fixed as part of a sweeping reform of how access control is managed by MediaWiki. Please keep up with the discussion [1] on wikitech-l, as it will likely effect many extensions and third-party software. We're also going to refrain from fixing this security issue until such time as this reformation is complete (correct me if I'm wrong, Yuri).
Woops, forgot to include the linky. The discussion can be viewed here: http://lists.wikimedia.org/pipermail/wikitech-l/2007-July/032165.html
- -- Daniel Cannon (AmiDaniel)
http://amidaniel.com cannon.danielc@gmail.com