Please do a security review of Wikibase-Quality-External-Validation.
Thank you very much!
Description
Event Timeline
@Tamslo, are you asking if this can be closed? Definitely not. Both of the other extensions have serious issues that need to be addressed before they can be deployed, and I've only started reviewing this one. If plans change on wmde's side, please let me know.
Could you be so kind and clarify the blocking issues for the other two extensions? For Constraints we have seen only one open ticket (T101467), for which we have uploaded a fix.
Same for the Quality extension. Only one blocking task for which we have uploaded some patches. I'm not sure if we can close it on our own or if you could have another look at it?
As far as the plans of wmde are concerned:
The current plan is to do a Beta deploy about June, 19th 2015 0800 PDT.
On June, 30th there should be a deploy on test and July, 8th on wikidata.org. So far the current plans.
Do you have, additional to the questions above, something that would block the planned beta deploy?
@csteipp, wbqev_dump_information contains a row for each database dump, that was imported. For now, there are only 3 ones. When new databases are integrated for cross-checks, the number will increase, but this table will always just have a few rows.
SpecialCrossCheck::buildResultTable
$referenceStatus = $this->msg( "wbqev-crosscheck-status-" . $result->getReferenceResult()->getStatus() )->text();
Either user escaped() or don't use rawhtml in the table cell.
In ComparisonResult you guard setting the result to a list of constant strings, but in ReferenceResult that only happens on object creation. ReferenceResult should do the same as ComparisonResult.
Change 221104 had a related patch set uploaded (by Dominic.sauer):
T99358 guard setting the result to a list of constant strings in ReferenceResult similar to the ComparisonResult
Change 221107 had a related patch set uploaded (by Dominic.sauer):
T99358 guard setting the result to a list of constant strings in ReferenceResult similar to the ComparisonResult
Change 221104 merged by jenkins-bot:
T99358 guard setting the result to a list of constant strings in ReferenceResult similar to the ComparisonResult
Change 221107 merged by jenkins-bot:
T99358 guard setting the result to a list of constant strings in ReferenceResult similar to the ComparisonResult
Sorry. For now you can ignore this. I'll mark it as stalled and reopen it when it becomes relevant again.
We are archiving the extension T204490: Archive the WikibaseQualityExternalValidation extension