Page MenuHomePhabricator

Security review of Quiz Extension
Closed, InvalidPublic

Event Timeline

Hey @greg, please update the description with the info requested at https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Security_reviews#Requesting_a_review, in particularly, the target date for deployment. Thanks!

Hey @greg, please update the description with the info requested at https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Security_reviews#Requesting_a_review, in particularly, the target date for deployment. Thanks!

ping @Toniher :)

Hey @greg, @dpatrick, I don't know what to tell you. I guess the sooner we can have it in ca.wikipedia.beta.wmflabs.org for testing the better :) Thanks!

Hey @greg, @dpatrick, I don't know what to tell you. I guess the sooner we can have it in ca.wikipedia.beta.wmflabs.org for testing the better :) Thanks!

@Toniher, please update the description of this ticket with the information requested at https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Security_reviews#Requesting_a_review.

Wait what? This extension is already deployed, why does it need another security review?

I blindly opened this after:

It'll still need a security review before that can be done

Which was based on a (wrong) understanding of:

Errr, the Quiz extension is already deployed on Wikimedia sites, so this would just be a Wikimedia-Site-requests right?

Well, no :) Their request is to test it on Beta Cluster *first* and then enable in production *if* they like it:

would it be possible to install Quiz Extension in beta site for some testing?
If after some tries, the outcome is positive, would it be possible to install it later in cawiki?

@Toniher: please correct me if I am wrong.

So, this is not needed.

Wait what? This extension is already deployed, why does it need another security review?

Thanks for noting that, @Legoktm. Do you know when it was last reviewed?

Do you know when it was last reviewed?

{T99961} (still private)

Do you know when it was last reviewed?

{T99961} (still private)

Ah, right. Thanks. We all reviewed it in fact (me, Brian, and Chris).