zhuyifei1999 added a comment.

  Historically, CI was insecure. The ability to run full tests means that you 
can run arbitrary code on it, and historically CI test runners were not as 
'isolated' as they currently are, so you had all sorts of opportunities to 
hijack the CI servers... a whitelist was needed. This was worked on in the CI 
isolation project 
<https://www.mediawiki.org/wiki/Continuous_integration/Architecture/Isolation>, 
and now we do have nice isolation. I don't know why the whitelist was not 
removed, considering it was part of the long term plan 
<https://phabricator.wikimedia.org/T107668#1501069>. (perhaps to prevent, say 
DOS attacks?)

TASK DETAIL
  https://phabricator.wikimedia.org/T217639

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: zhuyifei1999
Cc: Aklapper, pywikibot-bugs-list, Dvorapa, Dalba, zhuyifei1999, Xqt, Wenyi, 
Tbscho, MayS, Framawiki, Mdupont, JJMC89, Avicennasis, mys_721tx, jayvdb, 
Masti, Alchimista, Rxy
_______________________________________________
pywikibot-bugs mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/pywikibot-bugs

Reply via email to