- 🇬🇧United Kingdom rachel_norfolk UK
Whilst it would be very convenient to apply patches from any location, it does mean that anyone, anonymously, can run any php code they want on stm.
That’s quite a risk.
The current restrictions on patch location means that at least we know who made any naughty code and take actions to prevent that.
To be honest, creating an issue on a module and adding a patch to that issue is always a good idea, anyway, as it allows collaborative working.
I’m going to close this (as I have another similar issue)