https://www.mediawiki.org/wiki/Manual:Shell_framework#Restrictions
It also doesn't use wfShellExec()/Shell::command() so I'm not sure if this will require something custom or what.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Declined | None | T172584 Securing external binaries run by MediaWiki | |||
| Open | None | T182945 Apply shell restrictions (firejail) to Scribunto/LuaStandalone |
Event Timeline
Comment Actions
MediaWiki\Shell\Command seems designed for executing a process to perform some specific task, waiting for it to complete and then returning the results.
LuaStandalone executes a process that runs a simple "server" to accept commands on stdin and write results to stdout, so startup costs are paid once per Parser instance rather than once per #invoke during every parse.