Branch: refs/heads/okf-script-language-rights Home: https://github.com/xwiki/xwiki-dev-llm Commit: f1455de73227708dc9b36049c666e1bc173cdcbd https://github.com/xwiki/xwiki-dev-llm/commit/f1455de73227708dc9b36049c666e1... Author: Vincent Massol <[email protected]> Date: 2026-08-16 (Sun, 16 Aug 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json M xwiki/okf/conventions/security.md M xwiki/okf/index.md Log Message: ----------- [Misc] Record which right each scripting language requires * Only Velocity runs on Script Right; every other scripting language also requires Programming Right of the script author, the exception being Groovy with the Secure Groovy Customizer enabled (off by default). * Note the trap that a script service is callable with Script Right alone, so exposing an operation there puts it behind a lower bar than a Groovy macro. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications