@epriestley I don't think T9901 belongs here, as I've wanted to have arcanist "packaged", not whole Phabricator. And I've worked with PHP before, of I'm quite aware of how complex packaging and installation could be. But I'm not sure that applies to arcanist. Anyway, T4200#57593 has been red, so let me add my 2¢ relevant to my proposed approach (which is, after more thinking it through, to build and distribute an single-file self-contained arc executable along with every Phabricator instance).

not an issue, just failed XSS attempt