Page MenuHomePhabricator
Create Task
Maniphest T410753

Please add a security policy to the repo
Closed, ResolvedPublic
Actions

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
tests: Disable file-based check in test_eval_security on Python > 3.9pywikibot/coremaster+6 -5
[10.7.3] Publish Pywikibot 10.7.3 stable releasepywikibot/corestable+12 -3
Add generated password file to gitignore listpywikibot/coremaster+1 -0
doc: Provide security policy with Pywikibot repositorypywikibot/coremaster+32 -1
SEC: parse password lines as literals & update default PASS_BASENAMEpywikibot/corestable+74 -11
SEC: parse password lines as literals & update default PASS_BASENAMEpywikibot/coremaster+74 -11
Customize query in gerrit

Related Objects

Event Timeline

Reedy created this task.Nov 21 2025, 3:32 PM
Restricted Application added subscribers: pywikibot-bugs-list, Aklapper. · View Herald TranscriptNov 21 2025, 3:32 PM
Reedy triaged this task as High priority.Nov 21 2025, 3:40 PM
Reedy mentioned this in T410755: RCE via eval() in pywikibot during password parsing.Nov 21 2025, 3:46 PM
A_smart_kitten added a project: Security.Nov 21 2025, 3:52 PM
Xqt moved this task from Backlog to Next main release on the Pywikibot board.Nov 22 2025, 5:43 AM
Xqt added a project: Pywikibot-Login.
Xqt added a project: Pywikibot-Documentation.
Xqt added a subscriber: Mpaa.Nov 22 2025, 5:58 AM
Xqt subscribed.
Xqt changed the task status from Open to In Progress.Nov 22 2025, 7:24 AM
Xqt claimed this task.
gerritbot added a comment.Nov 22 2025, 12:05 PM

Change #1208989 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@master] SEC: parse password lines as literals & update default PASS_BASENAME

https://gerrit.wikimedia.org/r/1208989

gerritbot added a project: Patch-For-Review.Nov 22 2025, 12:05 PM
Xqt moved this task from Next main release to Needs Review on the Pywikibot board.Nov 23 2025, 4:56 PM
gerritbot added a comment.Nov 23 2025, 5:41 PM

Change #1208989 merged by jenkins-bot:

[pywikibot/core@master] SEC: parse password lines as literals & update default PASS_BASENAME

https://gerrit.wikimedia.org/r/1208989

Maintenance_bot removed a project: Patch-For-Review.Nov 23 2025, 6:30 PM
gerritbot added a comment.Nov 24 2025, 4:29 PM

Change #1210626 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@stable] SEC: parse password lines as literals & update default PASS_BASENAME

https://gerrit.wikimedia.org/r/1210626

gerritbot added a project: Patch-For-Review.Nov 24 2025, 4:29 PM
gerritbot added a comment.Nov 24 2025, 4:40 PM

Change #1210626 merged by Xqt:

[pywikibot/core@stable] SEC: parse password lines as literals & update default PASS_BASENAME

https://gerrit.wikimedia.org/r/1210626

Maintenance_bot removed a project: Patch-For-Review.Nov 24 2025, 5:31 PM
gerritbot added a comment.Nov 24 2025, 7:11 PM

Change #1210674 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@master] doc: Provide security policy with Pywikibot repository

https://gerrit.wikimedia.org/r/1210674

gerritbot added a project: Patch-For-Review.Nov 24 2025, 7:11 PM
Xqt moved this task from Backlog to Ready to go on the Pywikibot-Documentation board.Nov 25 2025, 6:36 AM
Xqt closed this task as Resolved.Nov 25 2025, 4:51 PM
gerritbot added a comment.Nov 28 2025, 2:29 PM

Change #1210674 merged by jenkins-bot:

[pywikibot/core@master] doc: Provide security policy with Pywikibot repository

https://gerrit.wikimedia.org/r/1210674

Maintenance_bot removed a project: Patch-For-Review.Nov 28 2025, 2:30 PM
gerritbot added a comment.Dec 8 2025, 9:24 AM

Change #1216551 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@master] Add generated passwo5rd file to gitignore list

https://gerrit.wikimedia.org/r/1216551

gerritbot added a project: Patch-For-Review.Dec 8 2025, 9:24 AM
gerritbot added a comment.Dec 8 2025, 9:41 AM

Change #1216551 merged by jenkins-bot:

[pywikibot/core@master] Add generated password file to gitignore list

https://gerrit.wikimedia.org/r/1216551

Maintenance_bot removed a project: Patch-For-Review.Dec 8 2025, 10:30 AM
Andrybak mentioned this in T412074: TypeError: BotPassword.__init__() takes 3 positional arguments but 12 were given.Dec 9 2025, 3:14 AM
gerritbot added a comment.Dec 10 2025, 8:42 AM

Change #1217116 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@stable] [10.7.3] Publish Pywikibot 10.7.3 stable release

https://gerrit.wikimedia.org/r/1217116

gerritbot added a project: Patch-For-Review.Dec 10 2025, 8:42 AM
gerritbot added a comment.Dec 10 2025, 8:57 AM

Change #1217116 merged by Xqt:

[pywikibot/core@stable] [10.7.3] Publish Pywikibot 10.7.3 stable release

https://gerrit.wikimedia.org/r/1217116

Maintenance_bot removed a project: Patch-For-Review.Dec 10 2025, 9:31 AM
gerritbot added a comment.Dec 13 2025, 4:09 PM

Change #1217829 had a related patch set uploaded (by Xqt; author: Xqt):

[pywikibot/core@master] tests: Disable file-based check in test_eval_security on Python > 3.9

https://gerrit.wikimedia.org/r/1217829

gerritbot added a project: Patch-For-Review.Dec 13 2025, 4:09 PM
gerritbot added a comment.Dec 13 2025, 4:28 PM

Change #1217829 merged by jenkins-bot:

[pywikibot/core@master] tests: Disable file-based check in test_eval_security on Python > 3.9

https://gerrit.wikimedia.org/r/1217829

Maintenance_bot removed a project: Patch-For-Review.Dec 13 2025, 4:30 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits