Tasks By Project

Project: ContentSecurityPolicy

Switch to Active Tasks 4 Phabricator task(s).

Phabricator Link	Wiki Link	Status	Priority	Author	Assignee	Projects	Subtasks	Parent Tasks
T135963	T135963: Add support for Content-Security-Policy (CSP) headers in MediaWiki	open	Medium (orange)			Security-Team (Back Orders) MediaWiki-General Platform Team Legacy (Watching / External) Patch-For-Review TechCom-RFC (TechCom-RFC-Closed) (Implemented) Epic ContentSecurityPolicy (MediaWiki)	T209022: current CSP testing policy would block frames T208188: RFC: Partial opt-out method for Content security policy T120888: Create optional XSS filter step for the parser T208191: Set hhvm.virtual_host&#91 default&#93 &#91 always_decode_post_data&#93 = false T196923: CSP Report: Triggered by mediawiki.js's domEval() function in Chrome and Safari (but not Firefox)
T208188	T208188: RFC: Partial opt-out method for Content security policy	open	Medium (orange)			Security-Team-Services (Privacy Engineering) (Watching) Platform Team Workboards (Clinic Duty Team) (External Code Review Completed) TechCom-RFC (P2: Resource) TechCom (Watching) Security-Team (Watching) Patch-For-Review ContentSecurityPolicy (MediaWiki) Security		T135963: Add support for Content-Security-Policy (CSP) headers in MediaWiki
T253075	T253075: Convert ContentSecurityPolicy to a service with dependency injection	open	Needs Triage (violet)			User-DannyS712 (Next) ContentSecurityPolicy (Backlog) Platform Engineering (Volunteer Needed Tasks) Dependency injection
T288225	T288225: Remove need for $wgExtensionFunction to configure CSP in MediaWiki	open	Needs Triage (violet)			Wikimedia-Site-requests (Backlog) ContentSecurityPolicy (Backlog)		T180192: Audit wgExtensionFunction, onRegistration and onSetupAfterCache callbacks in Wikimedia-deployed extensions