Village Pump (technical) - Ganglia

Ganglia

I was watching some job queue logs on Ganglia, suddenly it is asking for authorisation. http://ganglia./latest/graph_all_periods.php?c=Miscellaneous%20pmtpa&h=spence.&v=93084&m=enwiki_JobQueue_length&r=hour&z=default&jr=&js=&st=1325547418&z=large is the url. Any ideas what's going on? Rich Farmbrough,

There is a security issue that has been discovered with the software (a cross-site scripting attack) so until this is resolved we've had to lock it down.--Jorm (WMF) (talk) 23:55, 18 December 2012 (UTC)

Explained in http://lists./pipermail/wikitech-l/2012-December/065184.html --Malyacko (talk) 11:56, 19 December 2012 (UTC)

Thanks. Never understood why people put these security holes in in the first place, when they know they will just have to remove them.... But good to know what's happening. Rich Farmbrough,