Wikimedia Security Team/AppSec Clinic Minutes/2022-07-25

Date: 2022-07-25

Attending: MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T307278 - Patch still in progress
   2. T309894 - Tag MW-Core, core platform, determine ownership
      1. Patch deployed - done for now. Can likely come off this list next week.
   3. T310763 - Assigned to MMartorana_(WMF) for triage/CR
      1. Patch needs review from AHT - waiting another week.
   4. T311180 - Assigned to MMartorana_(WMF) for triage/CR
      1. Need to further research issue and find potential maintainers
   5. T312282 - Assigned to MMartorana_(WMF) for triage/CR.
      1. Should probably be declined now?
   6. T312820 - Assigned to MMartorana_(WMF) for assessment-related follow-up.
   7. T313205 - Assigned to MMartorana_(WMF) for assignment to Growth Team.
      1. Patch deployed - done for now. Can likely come off this list next week.
2. MStyles_(WMF)
   1. T309255 - Maryum starting ext deprecatation process - see how that goes.
   2. T310069 - Verify tagged teams, members for further review, move off secteam incoming
      1. Merge to existing task as there were some similar ones, pointed out by Subbu
   3. T311337 - Waitting on requesters.
      1. Include in next supplemental release, patch still needs CR, then security deploy
   4. T312951 - Assigned to MStyles_(WMF) for assessment-related follow-up.
3. Reedy_(WMF)
   1. T306516 - No update at this time
   2. T306211 - No update at this time
   3. T309703 - No update at this time
   4. T310393 - No update at this time
   5. T311368 - No update at this time
4. SBassett_(WMF)

New Phabricator Tasks Reviewed

1. T31324 - Assigned to MStyles_(WMF) for assessment-related follow-up.
2. T313299 - Assigned to SBassett_(WMF) for assessment-related follow-up.
3. T313487 - Assigned to MStyles_(WMF) for assessment-related follow-up.
4. T313637 - Assigned to SBassett_(WMF) for assessment-related follow-up.
5. T313726 - Assigned to MStyles_(WMF) for assessment-related follow-up.