Page MenuHomePhabricator

Complete initial version of TemplateStyles sufficient to do security review and then deploy it to WMF production
Closed, ResolvedPublic

Description

What's left to do?

Related Objects

StatusSubtypeAssignedTask
DeclinedNone
ResolvedJdlrobson
DeclinedNone
DuplicateNone
ResolvedJdlrobson
DuplicateNone
DuplicateNone
DeclinedNone
ResolvedJdlrobson
DuplicateNone
DuplicateNone
ResolvedNone
OpenNone
OpenNone
ResolvedTheDJ
DeclinedNone
InvalidNone
OpenFeatureNone
InvalidNone
ResolvedTheDJ
ResolvedTheDJ
InvalidNone
ResolvedIzno
ResolvedTheDJ
OpenNone
ResolvedJdlrobson
Openovasileva
DeclinedNone
ResolvedTgr
ResolvedAnomie
Resolvedtstarling
Resolvedcoren

Event Timeline

Jdforrester-WMF renamed this task from Complete initial version of TemplateStyles sufficient to deploy it to WMF production to Complete initial version of TemplateStyles sufficient to do security review and then deploy it to WMF production.Apr 22 2016, 5:44 PM
Jdforrester-WMF triaged this task as Medium priority.
Jdforrester-WMF added a project: Epic.

What's left to do?

I think most of what's left lies in the security review:

  • Determine whether the current list of blacklisted properties suffices
  • Determine if more functional values should be whitelisted
  • Try to style things that shouldn't be styled
    • Fix any found holes and add tests for them

The actual functionality of the extension is complete - at least to the current specs. The <templatestyles> tag is implemented and properly supplies styling to pages transcluding them provided they are in the list of acceptable namespaces.

Jdforrester-WMF assigned this task to coren.

OK, let's move determining the policy up to the security review.