[Foundation-l] Security holes in Mediawiki

[Domas Mituzas]

Hello Gregory,

> I was sort of surprised to learn today that Mediawiki software has  
> had 37
> security holes identified:


Why would you be surprised? It is web software, that allows _most_  
flexibility for its users, you can expect most problems because of  
that, especially in XSS area.
On the other hand, most of those identified vulnerabilities are ones  
published about _after_ they get fixed and releases delivered.

You should probably ask about actual vulnerabilities in other mailing  
lists, but it would be even better, if you did some basic research  
first. Posting walls of text to your blog and redirecting people there  
isn't constructive.

And by the way, our site security is getting better and better, once  
upon a time anyone could edit.

Domas