Wikimedia Security Team/AppSec Clinic Minutes/2023-02-21

Date: 2023-02-21

Attending: MMartorana_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T326952 - Test the patch and deploy?
   2. T327445 - Is someone interested in this?
   3. T328746 - Confirm w/ Sam that edit rights are removed.
   4. T328393 - Is someone interested in this?
   5. T329417 - Triaged, review previous mw versions?
2. MStyles_(WMF)
   1. T313241 - Maint script merged, determine next steps.
   2. T316360 - Awaiting feedback.
   3. T318731 - Assigned to MStyles_(WMF) for follow-up.
   4. T318731 - untagged security team
   5. T320363 - untagged security team
   6. T323651 - Assigned to MStyles_(WMF) to review.
   7. T326769 - Assigned to MStyles_(WMF) for follow-up.
   8. T328667 - Assigned to MStyles_(WMF) for review.
3. Reedy_(WMF)
   1. T306211 - Response provided, requesting team can re-tag when ready for CR.
   2. T310393 - Open, untriaged.
   3. T318825 - Assigned for follow-up.
   4. T321092 - Assigned for follow-up.
   5. T324322 - In progress, likely decline.
   6. T324323 - In progress, likely decline.
   7. T325251 - Assigned for follow-up.
4. SBassett_(WMF)
   1. T315820 - Triage, await discussion.
   2. T316722 - Await discussion.
   3. T326871 - Waiting on AHT/Thalia response.
   4. T306708 - Review with secteam leadership.
   5. T328568 - Push reviewers for merge.
   6. T328667 - Assigned to SBassett_(WMF) for review.

Sent to Kelton
Sent to Privacy Engineering

1. T329867

New Phabricator Tasks Reviewed

1. T144097 - Assigned to MMartorana_(WMF) for review.
2. T329121 - Assigned to SBassett_(WMF) to respond.
3. T330085 - Assigned to Reedy_(WMF) for review.
4. T330086 - Assigned to Reedy_(WMF) for review.