Wikimedia Security Team/AppSec Clinic Minutes/2022-06-27

Date: 2022-06-27

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

edit
  1. MMartorana_(WMF)
    1. T307278 - Patch still in progress
    2. T309894 - Tag MW-Core, core platform, determine ownership.
    3. T310763 - Assigned to MMartorana_(WMF) for triage/CR.
      1. Patch has been proposed...
  2. MStyles_(WMF)
    1. T306514 - Still in-progress
    2. T309255 - Recommended retire affected extension, under further review
    3. T309943 - Zabe added, tag Traffic/Brandon, see who can look at remaining items
    4. T310069 - Verify tagged teams, members for further review, move off secteam incoming
      1. Subbu responded
  3. Reedy_(WMF)
    1. T306516 - No update at this time
    2. T306211 - No update at this time
    3. T309703 - No update at this time
    4. T310393 - No update at this time
  4. SBassett_(WMF)
    1. T308861 - Patch written and posted, try to get CR then deploy
    2. T298784 - Security access, to discuss with JCross_(WMF)

New Phabricator Tasks Reviewed

edit
  1. T311368 - Assigned to Reedy_(WMF) for triage/CR.
  2. T311180 - Assigned to MMartorana_(WMF) for triage/CR.
  3. T311337 - Assigned to MStyles_(WMF) for triage/CR.