add automatic checks/test for suppressed content as a security measure
Open, MediumPublic
Actions

Assigned To

None

Authored By

	Matanya
	May 3 2016, 7:27 PM

Project Tags

Referenced Files

None

Subscribers

Description

From time to time security issues are discovered (ex. T133700) in new code. I suggest we have some unit tests/jenkins jobs checking some edits with oversighted content to see it really stays oversighted.

Related Objects

Mentioned Here: T133700: MobileFrontend contributions display edits where username is revdel'd without having appropriate rights

Event Timeline

Matanya created this task.May 3 2016, 7:27 PM

Restricted Application added subscribers: Zppix, Aklapper. · View Herald TranscriptMay 3 2016, 7:27 PM

Matanya added a project: Security-General.May 3 2016, 7:27 PM

Aklapper added a project: MediaWiki-Revision-deletion.Jun 29 2018, 3:00 PM

• Phabricator_maintenance added a project: acl*security.Sep 20 2018, 9:14 AM

This sounds like a good idea for a browser test - add some suppressed content to the database, and then access the page through different endpoints to ensure it's not leaked somehow.

Legoktm renamed this task from add automatic checks/test for oversighted content as a security measure to add automatic checks/test for suppressed content as a security measure.Sep 21 2018, 3:20 AM

I'm available for pairing and/or review if somebody wants to create a Selenium/browser test for this.

sbassett subscribed.Sep 21 2018, 2:00 PM

• chasemp triaged this task as Medium priority.Dec 9 2019, 5:22 PM

Aklapper removed a project: Security-General.Dec 13 2019, 10:46 AM

• chasemp added a project: Security.Feb 10 2020, 10:59 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:07 PM

zeljkofilipin moved this task from Selenium to Inbox on the MediaWiki-Core-Tests board.Mar 24 2025, 6:15 PM

zeljkofilipin unsubscribed.

add automatic checks/test for suppressed content as a security measureOpen, MediumPublicActions

Description

Related Objects

Event Timeline

add automatic checks/test for suppressed content as a security measure
Open, MediumPublic
Actions