Wikimedia Security Team/AppSec Clinic Minutes/2022-10-03

Date: 2022-10-03

Attending: MMartorana_(WMF), SBassett_(WMF), MStyles_(WMF), Reedy

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T315407 - "Passive watching".
   2. T316414 - Manfredi will work on a ported patch for this edge case.
   3. T318637 - Triaged. Can probably be closed.
2. MStyles_(WMF)
   1. T313241 - Maint script merged, determine next steps.
   2. T315123 - Patch ready, needs AHT review, maybe we can just deploy?
   3. T316360 - Awaiting feedback.
   4. T316998 - Overly-cautious security-protection, possible follow-up.
   5. T318731 - Assigned to MStyles_(WMF) for follow-up.
3. Reedy_(WMF)
   1. T316304 - Assigned to Reedy_(WMF) for follow-up (as they created it).
   2. T306211 - Open, untriaged.
   3. T310393 - Open, untriaged.
   4. T311368 - Open, untriaged.
4. SBassett_(WMF)
   1. T314884 - Awaiting further response from legoktm.
   2. T315820 - Triage, await discussion.
   3. T316722 - Await discussion.

New Phabricator Tasks Reviewed

1. T88044 - Assigned to MMartorana_(WMF) for follow-up.
2. T318731 - Assigned to MStyles_(WMF) for follow-up.
3. T318825 - Assigned to Reedy for follow-up.
4. T318841 - Assigned to SBassett_(WMF) for follow-up.
5. T318915 - Assigned to MMartorana_(WMF) for follow-up.
6. T318962 - SBassett_(WMF) untagged, sent to Analytics SREs.
7. T319134 - Assigned to MStyles_(WMF) for follow-up.