Package: mediawiki Version: 1:1.39.5-1~deb12u1
Hi,
Mediawiki ships with .htaccess files which contain outdated access control directives.
for instance, /usr/share/mediawiki/vendor/.htaccess contains:
Deny from all
rather than the more current
Require all denied
The new syntax was introduced in Apache 2.4, shipping since at least Jessie, April 2015.
Wouldn't it be time to go with the new syntax, as less and less people now continue to use the access_compat module?
Thanks,
Alain
forwarded 1064797 https://phabricator.wikimedia.org/T360850 thanks
Hi Alain,
On Sun, 25 Feb 2024 23:36:16 +0100 Alain Knaff alain@knaff.lu wrote:
Mediawiki ships with .htaccess files which contain outdated access control directives.
Thanks for reporting this. This is an upstream issue, so I've forwarded your report to https://phabricator.wikimedia.org/T360850 and submitted patches for it. Once there's a new MediaWiki release, it'll get picked up by Debian.
-- Kunal Mehta
Processing commands for control@bugs.debian.org:
forwarded 1064797 https://phabricator.wikimedia.org/T360850
Bug #1064797 [mediawiki] Mediawiki ships with .htaccess files containing outdated access control configuration Set Bug forwarded-to-address to 'https://phabricator.wikimedia.org/T360850'.
thanks
Stopping processing here.
Please contact me if you need assistance.
mediawiki-debian@lists.wikimedia.org