Page MenuHomePhabricator

Address Rust security review findings
Closed, ResolvedPublic

Description

Description

We probably can't reduce the risk below medium, but there are absolutely actions we can take to mitigate some of the findings.

This is a tracking bug.


Completion checklist

Event Timeline

DSantamaria edited projects, added Essential-Work; removed OKR-Work.

This is essential work that we committed to Security to do, and was triaged as such. Why did this get moved out to the engineering backlog?

@Jdforrester-WMF The plan was to tie this to a Q1 epic around Rust. Is that reasonable? If not, do we have a more "urgent" place to put it than the engineering backlog?

All sub-tasks are Resolved or in sign-off, so this is too.