Disable $wgServer autodetection to prevent cache poisoning attacks

[lhc/web/wiklou.git] / includes / shell / CommandFactory.php

diff --git a/includes/shell/CommandFactory.php b/includes/shell/CommandFactory.php
index 78f1d80..d3e00b1 100644 (file)
--- a/includes/shell/CommandFactory.php
+++ b/includes/shell/CommandFactory.php
@@ -97,9 +97,10 @@ class CommandFactory {
         *
         * @return Command
         */
-       public function create() {
+       public function create(): Command {
                if ( $this->restrictionMethod === 'firejail' ) {
                        $command = new FirejailCommand( $this->findFirejail() );
+                       $command->restrict( Shell::RESTRICT_DEFAULT );
                } else {
                        $command = new Command();
                }