-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

yurik@svn.wikimedia.org wrote:

• 	list( $host, $lag ) = $wgLoadBalancer->getMaxLag();
  

• 	$data[] = array (
  

• 		'host' => $host,
  

• 		'lag' => $lag);
  

While we're happy to tell everyone the hostnames of our own database servers here at Wikimedia, as a general rule this would be considered an information disclosure vulnerability.

- -- brion vibber (brion @ wikimedia.org)