Wikimedia Security Team/Security Review Planning/2024-04-08

From mediawiki.org

Minutes for the Security Team's Q4 2023 (FY24) (March to June) quarterly planning session

Date: 2024-04-08

Secscrum board: https://phabricator.wikimedia.org/tag/secscrum/

Attending: CLemoisson-WMF, MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF), ACooper-WMF

Below is from previous quarter, for now:

Completed Reviews, Previous Quarter

  1. MathJax - MMartorana_(WMF) - T354136 - low, automatically accepted
  2. Matomo and related code - MStyles_(WMF) - T351657 - low, automatically accepted
  3. Extension:ReportIncident - SBassett_(WMF) - T350253 - low, automatically accepted
  4. Floating UI - SBassett_(WMF) - T349569 - medium, patched, waiting for dev approval to make public
  5. Wordpress Plugin - MMartorana_(WMF) - , low, automatically accepted

Reviews That Need Follow-Up This Quarter

Updates Made For Other Review Tasks

  1. None.

Accepted Reviews To Complete This Quarter

  1. AutoModerator - MStyles_(WMF) - T361690
  2. Network Session - ACooper-WMF - T357353
  3. IPReputation - MStyles_(WMF) - T360070
  4. CSS-Sanitizer - SBassett_(WMF) - T361956
  5. UI Service for Metrics Platform - SBassett_(WMF) - T358115
  6. Reefjs - MMartorana_(WMF) - T361961
  7. New Wordpress Plugins - MMartorana_(WMF) - T360365