Security review of Gather extension
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	greg
	Mar 6 2015, 6:22 PM

Description

Duration: 1hr

Related Objects
Search...

Status	Assigned	Task
Resolved	Jdlrobson	T91341 Enable Extension:Gather (article lists) on English Wikipedia Mobile Beta
Resolved	• csteipp	T91778 Security review of Gather extension
Resolved	Yurik	T91308 Gather extension should use a database table

Event Timeline

greg created this task.Mar 6 2015, 6:22 PM

greg assigned this task to • csteipp.

greg raised the priority of this task from to Medium.

greg updated the task description. (Show Details)

greg added projects: Gather, deprecated-security-team-reviews.

greg added subscribers: Liuxinyu970226, Legoktm, Jdlrobson and 3 others.

Note, this may be a little premature until we have the backend sorted. I'd ask that this doesn't get done until T91308 is done.

Jdlrobson added a subtask: T91308: Gather extension should use a database table.Mar 6 2015, 6:34 PM

In T91778#1096214, @Jdlrobson wrote:

Note, this may be a little premature until we have the backend sorted. I'd ask that this doesn't get done until T91308 is done.

Not a problem to wait, but if you have the basic architecture figured out, it would be great to spend an hour with someone on the team to identify (before you finish building) where we need security features. It's generally made the rollout much faster when I work with teams while they're still designing / building stuff, and then I can do a quick review prior to deployment.

Jdlrobson closed subtask T91308: Gather extension should use a database table as Resolved.Mar 13 2015, 9:20 PM

cc @Yurik
@csteipp we are at a point we can begin doing this. Would you be free next Monday.

Jdlrobson moved this task from In Analysis to Ready for dev on the Gather Sprint Diplodocus board.Mar 13 2015, 9:33 PM

Jdlrobson moved this task from Needs triage to Triaged bugs on the Gather board.Mar 13 2015, 9:49 PM

Jdlrobson moved this task from Triaged bugs to Product triage on the Gather board.Mar 13 2015, 10:19 PM

@Jdlrobson, yeah and my calendar is up to date, so feel free to schedule any time that works for you. 1-2pm?

• JKatzWMF moved this task from Ready for dev to In Analysis on the Gather Sprint Diplodocus board.Mar 16 2015, 5:05 PM

Jdlrobson updated the task description. (Show Details)Mar 16 2015, 6:55 PM

Jdlrobson moved this task from In Analysis to Ready for dev on the Gather Sprint Diplodocus board.

Jdlrobson moved this task from Ready for dev to In development on the Gather Sprint Diplodocus board.Mar 18 2015, 1:03 AM

Scheduled for 10am Friday 20th March PST.
Let me know if anyone else wants to join

Jdlrobson moved this task from Product triage to In sprint on the Gather board.Mar 19 2015, 6:09 PM

Sat down with Chris T93382 and T93385 are the two blockers for deploying to production. The latter doesn't need to be blocking provided there is a patch ready to merge and be LD if necessary come next Thursday. @csteipp correct me if wrong!