Virgil Ierubino <virgil.ierubino@...> writes:
Does anyone know how well this extension works? Has anyone used it?
It claims to be able to restrict access to all pages except those on a
whitelist, FOR EACH INDIVIDUAL USER. The last part there, of course, being
the bit that makes me suspicious. The documentation on Meta mentions no
holes, workarounds, or flaws of any kind. Does this extension do what it
says on the tin?
We, the authors, have added a much more complete list of possible security
issues and workarounds to block them whenever possible. Please see
http://www.mediawiki.org/wiki/Extension:WhiteList#Security_Issues
However, in the spirit of open source development, we would very much like to
invite everyone here to try out the extension and try to find additional holes.
We would be very glad to patch them up if issues are discovered.