Page MenuHomePhabricator

Security Review for whichbrowser/parser
Closed, ResolvedPublic

Description

To help checkusers better understand User Agent strings and be able to decipher patterns faster, Anti-Harassment would like to parse User Agent strings in CheckUser (See T175587).

From our research, it seems the best way to do this is with the whichbrowser/parser library (unless another alternative exists that we are unaware of).

We would like to add this to the extension and to production after an approved security review.

Event Timeline

sbassett triaged this task as Medium priority.
sbassett moved this task from Incoming to In Progress on the deprecated-security-team-reviews board.

I note, but not necessarily a blocker, that the Developer(s) don't seem very active based on https://github.com/WhichBrowser/Parser-PHP and the issues/pull requests. Handful of bugs and reports etc that have gone without response to for months

I note, but not necessarily a blocker, that the Developer(s) don't seem very active based on https://github.com/WhichBrowser/Parser-PHP and the issues/pull requests. Handful of bugs and reports etc that have gone without response to for months

Maybe not so much of an issue.. They've started doing some maintenance again... :)

No problems with this going forward

No problems with this going forward

Awesome. Thanks a bunch, @Reedy!