Wikimedia Security Team/AppSec Clinic Minutes/2026-06-22

Date: 2026-06-22

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: ASanford-WMF, APrum-WMF, Roan Kattouw (WMF), MMartorana_(WMF), MStyles (WMF), Reedy, RScout-WMF, RSilvola-WMF, SBassett_(WMF)

Previous Tasks

1. MMartorana_(WMF)
   1. T120386 - To review old patch.
   2. T422246 - Verify production status.
2. MStyles_(WMF)
   1. T427589 - Ping SRE about restrictive CSP.
3. SBassett_(WMF)
   1. T399102 - Needs more review, then merge. (low-priority)
   2. T415590 - DE to pick up.
   3. T423568 - To monitor, review.
   4. T423769 - To monitor, review, captcha implications?
   5. T426913 - Verify one more user's email address (RSilvola), ping Sukhbir
   6. T427611 - To review small issues.
   7. T428006 - Formulate snippet into patch.
   8. T428803 - In-progress.
   9. T429244 - Push through gerrit, ext:WMC.
4. Reedy
   1. T425970 - WMDE update, waiting to resolve.
   2. T426993 - To mostly go out with the standard security release.
5. Roan Kattouw (WMF)
   1. T385391 - Next to triage and review.
   2. T407974 - Next to triage and review.
   3. T407977 - Next to triage and review.
   4. T428829 - To provide code review.
6. APrum-WMF
   1. T420601 - In progress.
7. ASanford-WMF
8. RScout-WMF
9. RSilvola-WMF
   1. T302770 - Check with Emill re: priority.
   2. T415219 - To assign to Randall.
   3. T416930 - To discuss messaging with EMill.
   4. T428003 - To discuss with EMill.
   5. T429101 - To discuss with EMill.

New Phabricator Tasks Reviewed

1. T429243 - RScout's onboarding task
2. T386086 - Secteam watching, nothing to do at this time
3. T429266 - Secteam watching, RSilvola to hand off to Marcin
4. T429601 - Consolidated access task, APrum-WMF to complete
5. T429622 - ASanford-WMF to triage
6. T429643 - In-progress for another hypothesis
7. T344108 - Assigned to APrum-WMF