Jump to content

Wikimedia Security Team/Security Review Scrum/2019-10-01

From mediawiki.org

Date/time: October 1st, 2019 - 10:00 AM PDT

Attending: Scott, Jennifer

Backlog

  • Security readiness review for the MachineVision extension, unassigned https://phabricator.wikimedia.org/T227346
  • John to explore funding of 3rd party audits this quarter, stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846
  • Planet Wikimedia,unassigned https://phabricator.wikimedia.org/T207246
  • Security Concept Review For client side error logging js client,unassigned https://phabricator.wikimedia.org/T232820

Active

  • Security Review for MediaWiki REST API, assigned to Sam, https://phabricator.wikimedia.org/T230140
  • Security review of Ex:DoubleWiki, in-progress - https://phabricator.wikimedia.org/T131199
  • Parsoid-PHP, moved to active, Scott this week - https://phabricator.wikimedia.org/T227209
  • Security review of WebAuthn library dependancies, in-progress - https://phabricator.wikimedia.org/T227244

Waiting

  • Labs db/sanitarium and maintain-views.yaml audits, assigned to James F, stalled - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011
  • Page Content Service route /page/mobile-html, waiting - https://phabricator.wikimedia.org/T227114

Frozen (delayed indefinitely)

  • Banner preview, stalled - https://phabricator.wikimedia.org/T230176
  • Security review of preact 8.4.2, Scott did a very simple assessment, unassigned, stalled https://phabricator.wikimedia.org/T227726

Closing Soon / Closed

Retrieved from "https://www.mediawiki.org/w/index.php?title=Wikimedia_Security_Team/Security_Review_Scrum/2019-10-01&oldid=3629737"