[Moin-devel] Horror Story: Calling Home

'Dmytri Kleiner' dk at trick.ca
Tue Dec 14 08:33:02 EST 2004


On Tue, Dec 14, 2004, Alexander Schremmer wrote:

> No, it is not. It is a blacklist update which failed yesterday because of
> instabilities of the main servers.

Yes, I know I was joking.

> > Please, please, please, make sure that any outbound request from the
> > Wiki engine default to **OFF**. This is just polite.
> 
> Of course that is standard config. You have to explicitly enable antispam. The
> standard config does _not_ ship it enabled. So be polite and RTFM.

Well, I did not even know about the feature, so I did not turn it on. I
should not have to RTFM to turn an insecure setting //off//.

I just checked the tar ball (1.2.4) and here is a cut and paste from the
distro moin_config.py

{{{
# use this for protecting your wiki against link spam:
from MoinMoin.util.antispam import SecurityPolicy
}}}

Looks like it default on to me. If this is different in later versions,
that is great, if not, it should be.

I love MoinMoin btw, and I do not mean to be inpolite.

Cheers.

----
Dmytri Kleiner
dk at trick.ca





More information about the Moin-devel mailing list