Hi @mmartorana, just wanted to flag that we ended up not using the Ultimate Maps Plugin, there is no need to review that one. Thank you!

Thank you for this amazing work @BTullis, just finished doing a quick smoke test and everything seems to be working as usual. Will continue tomorrow.

Hi @BTullis, thank you for all the work on this. Let's move forward with the upgrade tomorrow, I'll be around to smoke test the platform and new version.

Thank you for the review @Mstyles, we will work on the upgrade once @BTullis is back, keeping in mind the items you have flagged.

Thank you @BTullis for deploying this so quickly! As mentioned on Slack, I just ran a quick test and everything seems to be working correctly now. I will continue testing this feature this afternoon and will get back to you with the final results.

Noted, thank you @Mstyles for working around the clock to get the plugin review completed on time for the launch of our upcoming campaign.

Thank you @mmartorana! We will keep you informed once we finish deploying the updates!

In T335004#9449562, @mmartorana wrote:

Hi @SCampos-WMF - What's the progress on the remediation plan? Kindly provide an update so that we can prevent adding it to our risk registry. Thank you.

I am adding @SBisson to this ticket, for further visibility on WikiPreview security recommendations and action items.

Hey @BTullis, thanks for addressing this issue! I'll generate a ticket and share it with our technical partners to address it in our current Sprint. I'll keep you updated on the progress.

Hey @sbassett, please apologize for the delayed response. We've created a ticket for Human Mande to enhance the security levels of their own plugins, and to get in touch with the third-party plugin developers to highlight the identified security vulnerabilities and request the necessary improvements. This is a top-priority item and is currently part of our ongoing Sprint. Our team is actively engaged in implementing the required security measures. Thanks for your understanding!

Thanks for updating this @BTullis. I have rechecked, and it appears that everything is functioning as intended. I believe the ongoing changes are still being implemented, as some results for the previous 30 days are differing hourly. I will continue to monitor the situation every hour until tomorrow to ensure that nothing unusual arises.

Great, thank you for the guidance!

Thank you for sharing this, it was very useful :D ! @RhinosF1 I was able to link my wikitech account to my phabricator account!

Thanks! Will take a look at it and discuss with team to see which tools I should have access to.

Hi, thank you for sharing the information!