MediaWiki

Wikimedia Security Team/Security Review Scrum/2019-07-23

< Wikimedia Security Team | Security Review Scrum


Date/time: July 23rd, 2019 - 10:00 AM PDT

Attending: Jennifer, Scott

Updates: * indicates change

Backlog

  • Security review of preact 8.4.2, to be assigned: https://phabricator.wikimedia.org/T227726
  • John to explore funding of 3rd party audits this quarter stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846
  • Parsoid-PHP, not quite ready for review, to be assigned - https://phabricator.wikimedia.org/T227209

Active

  • (informal) Security Concept Review For LibUp 2.0, starting: https://phabricator.wikimedia.org/T227820
  • Concept Review for the machine vision, starting - https://phabricator.wikimedia.org/T227591
  • Page Content Service route /page/mobile-html, started - https://phabricator.wikimedia.org/T227114
  • Security review of WebAuthn library dependancies, started - https://phabricator.wikimedia.org/T227244
  • * Doublewiki (old), will likely complete this weekstarted - https://phabricator.wikimedia.org/T131199
  • Sec review of steward userJS, started - https://phabricator.wikimedia.org/T227221
  • CentralNotice Code Review request, assigned to Sam starting - https://phabricator.wikimedia.org/T226963
  • Planet Wikimedia - assigned to Michal Anna, stalled - https://phabricator.wikimedia.org/T207246

Waiting

  • John and Scott to follow up with Raz re: risk ownership in-progress - https://phabricator.wikimedia.org/T216419
  • Labs db/sanitarium and maintain-views.yaml audits - transition to James F for review in-progress - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011

Frozen (delayed indefinitely)

  • Waiting on update from Yurik/Vega folks (upstream) to proceed stalled - https://phabricator.wikimedia.org/T222806
  • Audiences user-testing concept review, stalled - https://phabricator.wikimedia.org/T220043
  • Audiences growth team emails concept review, stalled - https://phabricator.wikimedia.org/T220242
  • * PageForms review from a long time ago, closure note posted, stalled - https://phabricator.wikimedia.org/T149869
Retrieved from "https://www.mediawiki.org/w/index.php?title=Wikimedia_Security_Team/Security_Review_Scrum/2019-07-23&oldid=3629751"