Wikimedia Security Team/AppSec Clinic Minutes/2026-06-15

Date: 2026-06-15

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: ASanford-WMF, APrum-WMF, Roan Kattouw (WMF), MMartorana_(WMF), MStyles (WMF), Reedy, RSilvola-WMF, SBassett_(WMF)

Previous Tasks

1. MMartorana_(WMF)
   1. T120386 - To review old patch.
   2. T422246 - Verify production status.
2. MStyles_(WMF)
   1. T427589 - Ping SRE about restrictive CSP.
3. SBassett_(WMF)
   1. T399102 - Needs more review, then merge. (low-priority)
   2. T415590 - Riku to follow up.
   3. T423568 - To monitor, review.
   4. T423769 - To monitor, review, captcha implications?
   5. T426913 - Can resolve, but need to investigate pre-release list, send Slack first.
   6. T427611 - To deploy updated patch.
   7. T428006 - Formulate snippet into patch.
4. Reedy
   1. T302770 - Stalled.
   2. T425970 - Riku to follow up, Reedy to just perform rotations.
   3. T426993 - To mostly go out with the standard security release.
   4. T428103 - Hyp work, in-progress.
5. Roan Kattouw (WMF)
   1. T385391 - Next to triage and review.
   2. T407974 - Next to triage and review.
   3. T407977 - Next to triage and review.
6. APrum-WMF
   1. T420601 - In progress.
   2. T402145 - To provide basic privacy review.
7. ASanford-WMF
8. RSilvola-WMF
   1. T415219 - To assign to Randall.
   2. T416930 - To discuss with EMill.
   3. T428003 - Assigned to EMill.

New Phabricator Tasks Reviewed

1. T428733 - Secteam backlog for now.
2. T428737 - Assigned to Reedy in-progress
3. T428803 - Assigned to SBassett_(WMF) in-progress
4. T428829 - Abs Wiki, secteam watching.
5. T428833 - Abs Wiki, secteam watching.
6. T429096 - Secteam untag, leaving to Safety Team.
7. T429056 - Secteam untag, leaving to Safety Team.
8. T429101 - Need to formulate a PSI response
9. T429244 - Security deploy today.