Wikimedia Security Team/AppSec Clinic Minutes/2023-02-27

Date: 2023-02-27

Attending: CLemoisson-WMF, MMartorana_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T326952 - Test the patch and deploy?
   2. T327445 - Is someone interested in this?
   3. T328393 - Is someone interested in this?
   4. T329417 - cannot reproduce issue in current version, test previous mw versions?
   5. T144097 - Assigned to MMartorana_(WMF) for review.
2. MStyles_(WMF)
   1. T313241 - Maint script merged, determine next steps.
   2. T316360 - Awaiting feedback.
   3. T318731 - untagged security team
   4. T320363 - untagged security team
   5. T323651 - Assigned to MStyles_(WMF) to review.
   6. T326769 - Assigned to MStyles_(WMF) for follow-up.
   7. T328667 - Assigned to MStyles_(WMF) for review.
3. Reedy_(WMF)
   1. T310393 - Open, untriaged.
   2. T318825 - Assigned for follow-up.
   3. T321092 - Assigned for follow-up.
   4. T330085 - Assigned to Reedy_(WMF) for review.
   5. T330086 - Done, Reedy to finish some doc updates.
4. SBassett_(WMF)
   1. T315820 - Triage, await discussion.
   2. T316722 - Await discussion.
   3. T326871 - Waiting on AHT/Thalia response.
   4. T328568 - Push reviewers for merge.
   5. T328667 - Assigned to SBassett_(WMF) for review.

Sent to Kelton
Sent to Privacy Engineering

New Phabricator Tasks Reviewed

1. T330085 - Assessed as lowest, unwatch.
2. T330312 - No actual incident, watching for now, RelEng to finish.