Tasks By Project

Project: SecTeam-Processed

Switch to Active Tasks 11 Phabricator task(s).

Phabricator Link	Wiki Link	Status	Priority	Author	Assignee	Projects	Subtasks	Parent Tasks
T179901	T179901: Create a tmp directory just for MediaWiki	declined	Medium (orange)			Security Performance-Team (Radar) (Watching) serviceops (Unsorted) MediaWiki-General SecTeam-Processed (Completed)
T189641	T189641: Service for checking the Pwned Passwords database	open	Low (yellow)			Platform Team Legacy (Watching / External) MediaWiki-Authentication-and-authorization (Backlog) Services (watching) MediaWiki-User-login-and-signup (Backlog) SecTeam-Processed (Completed) Security WMF-Legal (Backlog) User-Tgr (Next)
T203129	T203129: Define Suppress grants	open	Medium (orange)			MediaWiki-General SecTeam-Processed (Completed) User-Rxy (Stalled) WMF-Legal (Backlog) Trust-and-Safety (Security/Abuse) Patch-For-Review Platform Engineering (Tracking/Watching) Security-Team-Services (Privacy Engineering) (Backlog) Privacy
T258322	T258322: Open redirect in wikis that use http://domain.tld/index.php format	open	Low (yellow)			Platform Engineering (Tracking/Watching) Vuln-OpenRedirect (Tracked) MediaWiki-General SecTeam-Processed (Completed) Security
T263220	T263220: Limit concurrency of DPL queries	open	High (red)			Vuln-DoS (Tracked) Sustainability (Incident Followup) Platform Team Workboards (Clinic Duty Team) (Later) Performance Issue PoolCounter (Backlog) DynamicPageList (Wikimedia) (Backlog) MW-1.36-notes (1.36.0-wmf.18; 2020-11-17) SRE (Backlog) serviceops (Incoming 🐫) Slow-DB-Query SecTeam-Processed (Completed) Security Patch-For-Review	T266775: Stalls on db1075 (s3) replica db
T264798	T264798: CentralAuth should not emit central cookies when creating a local session	open	Low (yellow)			Security-Team (Watching) MediaWiki-extensions-CentralAuth (Incoming) SecTeam-Processed (Completed) Platform Engineering (Icebox)
T281972	T281972: ActorStore::checkDatabaseDomain: InvalidArgumentException: DB connection domain does not match when suppressing via Special:CentralAuth (CVE-2021-36128)	resolved	Lowest (sky)			SecTeam-Processed (Completed) MediaWiki-extensions-CentralAuth (Incoming) Security-Team (Our Part Is Done) Security Wikimedia-production-error (May 2021) Patch-For-Review Platform Team Workboards (MW Expedition) (UserStore pile) MW-1.36-notes (Backlog) MediaWiki-User-management (Backlog) MW-1.38-notes (1.38.0-wmf.9; 2021-11-16) MW-1.36-release (Not a blocker) MW-1.37-notes Stewards-and-global-tools (Untriaged)	T274817: Convert DatabaseBlock and AbstractBlock to UserIdentity, and make them cross-wiki aware.
T287542	T287542: API action=parse&prop=headhtml leaking user tokens and other private info in cross-origin requests (again)	resolved	Needs Triage (violet)			Platform Engineering (Inbox) Security Security-Team (Our Part Is Done) Regression Vuln-Infoleak MediaWiki-API (Unsorted) SecTeam-Processed (Completed) Vuln-CSRF (Tracked)
T289190	T289190: ActionFactory: Error: Class 'New-topicAction' not found	resolved	High (red)			SecTeam-Processed (Completed) Growth-Team (Triaged) Platform Team Workboards (Clinic Duty Team) (Waiting for deployment) User-DannyS712 (In progress) MW-1.37-notes (1.37.0-wmf.20; 2021-08-23) StructuredDiscussions (Backlog)
T289351	T289351: SpecialWhatLinksHere: Trying to get property 'page_id' of non-object	resolved	High (red)			MediaWiki-Special-pages (Special:WhatLinksHere) MW-1.37-notes (1.37.0-wmf.21; 2021-08-30) SecTeam-Processed (Completed) Wikimedia-production-error (Aug 2021) Platform Engineering (Inbox)
T292763	T292763: CVE-2021-44854: Rest API incorrectly publicly caches results from private wikis	resolved	High (red)			Security MW-1.37-notes Vector (Needs triage) API Platform (Done) MW-1.35-notes SRE (Backlog) SecTeam-Processed (Completed) Security-Team (Our Part Is Done) Vuln-Infoleak MW-1.36-notes (Backlog) Desktop Improvements (Incoming) Platform Engineering (Inbox) MediaWiki-REST-API (Backlog) MW-1.38-notes (1.38.0-wmf.6; 2021-10-26)