Active Tasks By Project

Project: Security-Team

Switch to All Tasks 7 Phabricator task(s).

Phabricator Link	Wiki Link	Status	Priority	Author	Assignee	Projects	Subtasks	Parent Tasks
T120888	T120888: Create optional XSS filter step for the parser	open	Medium (orange)	Bawolff (Brian Wolff)		MediaWiki-Parser (Backlog) Security-Team (Back Orders)		T135963: Add support for Content-Security-Policy (CSP) headers in MediaWiki
T135963	T135963: Add support for Content-Security-Policy (CSP) headers in MediaWiki	open	Medium (orange)	Bawolff (Brian Wolff)		Security-Team (Back Orders) MediaWiki-General Platform Team Legacy (Watching / External) Patch-For-Review TechCom-RFC (TechCom-RFC-Closed) (Implemented) Epic ContentSecurityPolicy (MediaWiki)	T209022: current CSP testing policy would block frames T208188: RFC: Partial opt-out method for Content security policy T120888: Create optional XSS filter step for the parser T208191: Set hhvm.virtual_host&#91 default&#93 &#91 always_decode_post_data&#93 = false T196923: CSP Report: Triggered by mediawiki.js's domEval() function in Chrome and Safari (but not Firefox)
T208188	T208188: RFC: Partial opt-out method for Content security policy	open	Medium (orange)	Bawolff (Brian Wolff)		Security-Team-Services (Privacy Engineering) (Watching) Platform Team Workboards (Clinic Duty Team) (External Code Review Completed) TechCom-RFC (P2: Resource) TechCom (Watching) Security-Team (Watching) Patch-For-Review ContentSecurityPolicy (MediaWiki) Security		T135963: Add support for Content-Security-Policy (CSP) headers in MediaWiki
T209083	T209083: Come up with a plan for community security reviews of MediaWiki extensions/skins	open	Low (yellow)	Legoktm (Legoktm)		MediaWiki-Stakeholders-Group (Needs Volunteer (Organisational)) Security-Team (Back Orders)
T248339	T248339: Decide how to deal with WebAuthn login/registration flow on Wikimedia wikis in future	open	Needs Triage (violet)	Reedy (Sam Reed)		SecTeam Discussion MediaWiki-Authentication-and-authorization (Backlog) MediaWiki-extensions-OATHAuth (Backlog) Platform Engineering (Tracking/Watching) Security-Team (Watching)	T248367: Update messages to notify WebAuthn users that they need to login on the same wiki they registered	T244088: Logging in at another wiki than WebAuth was set up fails
T264798	T264798: CentralAuth should not emit central cookies when creating a local session	open	Low (yellow)	Tgr (Gergő Tisza)		Security-Team (Watching) MediaWiki-extensions-CentralAuth (Incoming) SecTeam-Processed (Completed) Platform Engineering (Icebox)
T284274	T284274: action=history with a high limit like >= 2000, can be slow and might timeout	open	Needs Triage (violet)	Legoktm (Legoktm)		Performance-Team (Radar) (Perf recommendation) Platform Team Workboards (Clinic Duty Team) (Later) Security Security-Team (Watching) Patch-For-Review Vuln-DoS (Tracked) Performance-Team-publish (Consider write up) MediaWiki-Page-history (Backlog)