I've now merged https://gerrit.wikimedia.org/r/#/c/64450/ which gives
$wgRedactedFunctionArguments
I can't see any obvious password parameters, but I'm not sure if any of the
passed hashes etc would be classed as sensitive data. So could someone who's
familiar with the code add any and all appropriate entries to
$wgRedactedFunctionArguments
Version: master
Severity: enhancement
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | Feature | None | T66475 Make crosswiki bits and pieces truly global (tracking) | ||
| Declined | Feature | None | T15631 Wikimedia should become an OpenID provider | ||
| Declined | None | T31254 [SUGGESTION] Expose group memberships for query through OpenID teams extension | |||
| Declined | Wikinaut | T25735 Allow different user grouping for OpenID users | |||
| Declined | None | T61631 Enable Facebook login on Wikimedia wikis | |||
| Declined | None | T11604 Get OpenID extension to a state where it could be used on Wikimedia projects as a provider | |||
| Invalid | Wikinaut | T56413 Add necessary functions to $wgRedactedFunctionArguments |
Sam, I need to learn more about this, then I can fulfill your request.
Can you send me a pointer to a relevant page, or perhaps you can add a new section on https://www.mediawiki.org/wiki/Security_for_developers page ?
(In reply to comment #2)
$wgRedactedFunctionArguments was removed in I3d570a638A.
I3d570a638, rather.