Wikimedia Security Team/AppSec Clinic Minutes/2026-06-29

Date: 2026-06-29

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: ASanford-WMF, APrum-WMF, Roan Kattouw (WMF), MMartorana_(WMF), MStyles (WMF), Reedy, RScout-WMF, RSilvola-WMF, SBassett_(WMF)

Previous Tasks

1. MMartorana_(WMF)
   1. T120386 - To review old patch.
   2. T422246 - Guidance offered, to follow along.
2. MStyles_(WMF)
   1. T427589 - Ping SRE about restrictive CSP.
   2. T428829 - James F to deploy, otherwise we can during today's window.
3. SBassett_(WMF)
   1. T399102 - Needs more review, then merge. (low-priority)
   2. T415590 - DE to pick up.
   3. T423568 - To monitor, review.
   4. T423769 - To monitor, review, captcha implications?
   5. T426913 - Verify one more user's email address (RSilvola), ping Sukhbir
   6. T428006 - Formulate snippet into patch.
   7. T428803 - Possibly declinable? To review.
   8. T428003 - To review and advance.
4. Reedy
   1. T425970 - WMDE update, waiting to resolve.
5. Roan Kattouw (WMF)
   1. T385391 - Next to triage and review.
   2. T407974 - Next to triage and review.
   3. T407977 - Next to triage and review.
6. APrum-WMF
   1. T420601 - In progress.
   2. T344108 - To provide review.
7. ASanford-WMF
8. RScout-WMF
   1. T429243 - RScout's onboarding task
9. RSilvola-WMF
   1. T302770 - Check with Emill re: priority.
   2. T415219 - To assign to Randall.
   3. T416930 - To discuss messaging with EMill.
   4. T429101 - To discuss with EMill.

New Phabricator Tasks Reviewed

1. T430429 - Secteam untag, leaving to Safety Team
2. T429821 - Assigned to RScout-WMF
3. T430103 - To triage during quarterly planning
4. T430197 - Hypothesis work, secteam backlog
5. T430311 - Secteam untag, leaving to Safety Team
6. T430477 - Moved to watching, will monitor
7. T430528 - Moved to watching, will monitor
8. T430548 - Eric G to review, possibly deploy today, Sam to ping other resources for audit