Hi!
I've developed my extension and I am not yet sure it's stable enough to
be uploaded to MediaWiki SVN. Also, I don't have SVN commit access,
and I am not sure that I will be able to continuousely support my
extension
in the future (to make sure it will be compatible with the future
versions
of MediaWiki).
I've created a documentation page for my extension at
mediawiki.org,
then tried to upload tgz archive with it. But, MediaWiki refuses such
upload by default, and there's no way to enable it besides adding
some obvious settings to LocalSettings.php file (I've done it for
my local wikis).
In #mediawiki IRC channel I've been told that tgz upload is insecure
and poses a risk.
I am a bit in doubts about that. First of all, tgz files are so much
integral part of unix/linux distributions, that most of possible
overflow
and injections bugs should be fixed already.
Second, anyway, user has to follow a some link (let's say on the
external site). Risk (if there's any?) isn't really going away.
Dmitriy