Set $wgScoreSafeMode to false
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Ebe123
	Aug 29 2017, 12:16 AM

Description

Continuing the spirit of T172582: Run score binaries in a firejail and T171372: Find alternative to safe mode in Lilypond, $wgScoreSafeMode should be set to false to allow more options that are presented by Lilypond. This would correct the bugs caused by -dsafe:

Before doing so, testing must be done to ensure that Firejail can withstand the security implications this change could cause.

	Subject	Repo	Branch	Lines +/-
	Set $wgScoreSafeMode to false	operations/mediawiki-config	master	+1 -1
	$wgScoreSafeMode = false	operations/mediawiki-config	master	+1 -0

Mentioned In: T257066: Extension:Score / Lilypond is disabled on all wikis
T257091: Re-enable the Score extension in safe mode
T257062: Lilypond seemingly not subject to restrictions (CVE-2020-29007)
T171372: Find alternative to safe mode in Lilypond
Mentioned Here: T49604: Score should support note names in other languages
T54883: Usage of variables should be possible in lilypond code
T60526: Score: Colors names (e.g. #red) are not recognized
T161293: Paper format with Score extension in Wikipedia is A4 only
T171372: Find alternative to safe mode in Lilypond
T172582: Run score binaries in a firejail

Change 374445 had a related patch set uploaded (by Reedy; owner: Reedy):
[operations/mediawiki-config@master] $wgScoreSafeMode = false

Change 374446 had a related patch set uploaded (by Ebe123; owner: Ebe123):
[operations/mediawiki-config@master] Set $wgScoreSafeMode to false

Change 374445 abandoned by Reedy:
$wgScoreSafeMode = false

Change 374446 merged by jenkins-bot:
[operations/mediawiki-config@master] Set $wgScoreSafeMode to false

Mentioned in SAL (#wikimedia-operations) [2017-09-13T23:26:56Z] <dereckson@tin> Synchronized wmf-config/CommonSettings.php: Set $wgScoreSafeMode to false (T174413) (duration: 00m 50s)

Ebe123 closed this task as Resolved.Sep 13 2017, 11:27 PM