Page MenuHomePhabricator

Rsilvola (Riku Silvola)
Security and Privacy, WMF PSI

Today

  • No visible events.

Tomorrow

  • No visible events.

Tuesday

  • No visible events.

User Details

User Since
Nov 5 2025, 6:00 PM (39 w, 4 d)
Availability
Available
IRC Nick
rsilvola-wmf
LDAP User
Rsilvola
MediaWiki User
RSilvola-WMF [ Global Accounts ]

Engineering Manager in WMF Product Safety and Integrity team

Recent Activity

Mon, Aug 3

Rsilvola created FY2026-27 DE 4.3 - Volunteer Security (DE4.3.4 Require email confirmations).
Mon, Aug 3, 10:07 AM

Wed, Jul 29

Rsilvola added a project to T433489: Mark a few more accounts as system on private/fishbowl wikis: FY2026-27 DE 4.3 - Volunteer Security.
Wed, Jul 29, 12:07 PM · FY2026-27 DE 4.3 - Volunteer Security, Wikimedia-Site-requests, Product Safety and Integrity
Rsilvola added a project to T433488: Check for (active, unblocked) users that don't have an email set on private/fishbowl wikis: FY2026-27 DE 4.3 - Volunteer Security.
Wed, Jul 29, 12:06 PM · FY2026-27 DE 4.3 - Volunteer Security, Product Safety and Integrity

Tue, Jul 28

Rsilvola added a project to T333722: Decommission #wikimedia-security IRC channel: Essential-Work.
Tue, Jul 28, 1:06 PM · Essential-Work, Security-Team, Security
Rsilvola added a project to T415219: Privacy review of x1 tables in preparation of adding them to wikireplicas: Essential-Work.
Tue, Jul 28, 1:06 PM · Essential-Work, Data-Platform-SRE (2026-07-03 - 2026-07-31), Data-Engineering-Radar, Data-Engineering, Security-Team, SecTeam-Processed, Privacy Engineering
Rsilvola added a project to T424285: Flow ships Handlebars 3.0.0 with known security vulnerabilities: Essential-Work.
Tue, Jul 28, 1:06 PM · Essential-Work, Vuln-VulnComponent, SecTeam-Processed, Security-Team, Security, StructuredDiscussions
Rsilvola added a project to T428737: Create a page to be used for $wgOATH2FARequiredGroupRemovalPages for private wikis: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 1:05 PM · FY2026-27 DE 4.3 - Volunteer Security, FY2025-26 WE 4.6 - Account Security, SecTeam-Processed, Wikimedia-Site-requests, Documentation, Security-Team
Rsilvola added a project to T197130: Document MediaWiki elevated security feature: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 1:04 PM · FY2026-27 DE 4.3 - Volunteer Security, SecTeam-Processed, Security-Team, MediaWiki-User-management, Security, Documentation
Rsilvola added a project to T399102: Rate-limit EmailAuth emails for all types of password attempts: Essential-Work.
Tue, Jul 28, 1:04 PM · Essential-Work, Product Safety and Integrity, SecTeam-Processed, user-sbassett, Patch-For-Review, Security-Team, MediaWiki-extensions-EmailAuth
Rsilvola added a project to T117618: Add restrictive CSP to upload.wikimedia.org: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 1:03 PM · FY2026-27 DE 4.3 - Volunteer Security, Patch-For-Review, Traffic, ContentSecurityPolicy, WMF-General-or-Unknown, Security-Team
Rsilvola added a project to T423537: Site JS reauth hack can be bypassed using 'centralauthtoken': FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:59 PM · MW-1.47-notes (1.47.0-wmf.15; 2026-08-11), FY2026-27 DE 4.3 - Volunteer Security, Patch-For-Review, WikimediaCustomizations, Vuln-MissingAuthz, SecTeam-Processed, MediaWiki-Core-Platform-Team, MediaWiki-Core-AuthManager, 2026-user-javascript-incident, Security, Security-Team
Rsilvola added a project to T431144: CSP: Unlock loading data and block loading scripts for execution: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:59 PM · FY2026-27 DE 4.3 - Volunteer Security, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T432904: Illustrate the time to confirm emails: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:57 PM · FY2026-27 DE 4.3 - Volunteer Security (DE4.3.4 Require email confirmations), SecTeam-Processed, Product Safety and Integrity, Security-Team, Security
Rsilvola added a project to T432908: Examine email confirmation by MX host: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:57 PM · FY2026-27 DE 4.3 - Volunteer Security (DE4.3.4 Require email confirmations), SecTeam-Processed, Product Safety and Integrity, Security-Team, Security
Rsilvola added a project to T420601: Notify the owner of a user JS page when someone else edits it: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:55 PM · FY2026-27 DE 4.3 - Volunteer Security, Patch-For-Review, Notifications (Echo), good first task, Sustainability (Incident Followup), SecTeam-Processed, 2026-user-javascript-incident, Product Safety and Integrity, Security, Security-Team
Rsilvola added a project to T432546: Improving reauth for ChangeContentModel: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:52 PM · FY2026-27 DE 4.3 - Volunteer Security, SecTeam-Processed, Security-Team, MediaWiki-User-management, 2026-user-javascript-incident, Product Safety and Integrity
Rsilvola added a project to T433066: Update Email confirmation metrics to all of 2026: FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 12:52 PM · FY2026-27 DE 4.3 - Volunteer Security (DE4.3.4 Require email confirmations), SecTeam-Processed, Product Safety and Integrity, Security-Team, Security
Rsilvola created FY2026-27 DE 4.3 - Volunteer Security.
Tue, Jul 28, 9:00 AM

Fri, Jul 24

Rsilvola added a watcher for FY2025-26 WE 4.6 - Account Security: Rsilvola.
Fri, Jul 24, 1:00 PM
Rsilvola updated Rsilvola.
Fri, Jul 24, 11:46 AM
Rsilvola updated Rsilvola.
Fri, Jul 24, 11:46 AM
Rsilvola updated Rsilvola.
Fri, Jul 24, 11:44 AM

Wed, Jul 22

Rsilvola added a comment to T706: Requests for addition to the #acl*Project-Admins group (in comments).

Hello! Could you add me as well? As the EM for PSI Security and Privacy I need to manage milestones and projects regularly.

Wed, Jul 22, 6:14 PM · Tracking-Neverending, Project-Admins
Rsilvola closed T432862: DE4.3 Volunteer Security as Declined.

Meant to create a tracking project. Ignore this.

Wed, Jul 22, 1:56 PM
Rsilvola created T432862: DE4.3 Volunteer Security.
Wed, Jul 22, 1:54 PM
Rsilvola closed Restricted Task, a subtask of T426631: CVE-2026-8857: Full RCE using EasyTimeline Extension, as Resolved.
Wed, Jul 22, 1:13 PM · MW-1.46-release, MW-1.45-release, MW-1.44-release, MW-1.43-release, affects-Miraheze, SecTeam-Processed, Vuln-RCE, EasyTimeline, Product Safety and Integrity, Security, Security-Team
Rsilvola changed the edit policy for acl*security_steward.
Wed, Jul 22, 9:07 AM

Tue, Jul 21

Rsilvola added a member for acl*security_management: Rsilvola.
Tue, Jul 21, 11:53 AM
Rsilvola changed the edit policy for acl*security_wmde.
Tue, Jul 21, 11:49 AM
Rsilvola changed the edit policy for acl*security_volunteer.
Tue, Jul 21, 11:35 AM
Rsilvola changed the edit policy for acl*security_trusa.
Tue, Jul 21, 11:34 AM
Rsilvola changed the edit policy for acl*security_steward.
Tue, Jul 21, 11:33 AM
Rsilvola changed the edit policy for acl*security_sre.
Tue, Jul 21, 11:32 AM
Rsilvola changed the edit policy for acl*security_secteam.
Tue, Jul 21, 11:30 AM
Rsilvola changed the edit policy for acl*security_releng.
Tue, Jul 21, 11:29 AM
Rsilvola changed the edit policy for acl*security_product_manager.
Tue, Jul 21, 11:29 AM
Rsilvola changed the edit policy for acl*security_ml_team.
Tue, Jul 21, 11:28 AM
Rsilvola changed the edit policy for acl*security_management.
Tue, Jul 21, 11:27 AM
Rsilvola changed the edit policy for acl*security_legal.
Tue, Jul 21, 11:26 AM
Rsilvola changed the edit policy for acl*security_frtech.
Tue, Jul 21, 11:25 AM
Rsilvola changed the edit policy for acl*security_documentation.
Tue, Jul 21, 11:24 AM
Rsilvola changed the edit policy for acl*security_developer.
Tue, Jul 21, 11:24 AM
Rsilvola changed the edit policy for acl*security_bugwrangler.
Tue, Jul 21, 11:23 AM
Rsilvola changed the edit policy for acl*security_bots.
Tue, Jul 21, 11:21 AM
Rsilvola changed the edit policy for acl*security.
Tue, Jul 21, 11:20 AM

Mon, Jul 20

Rsilvola reassigned T415219: Privacy review of x1 tables in preparation of adding them to wikireplicas from Rsilvola to Rscout.
Mon, Jul 20, 4:05 PM · Essential-Work, Data-Platform-SRE (2026-07-03 - 2026-07-31), Data-Engineering-Radar, Data-Engineering, Security-Team, SecTeam-Processed, Privacy Engineering
Rsilvola added a project to T432546: Improving reauth for ChangeContentModel: Security-Team.
Mon, Jul 20, 1:04 PM · FY2026-27 DE 4.3 - Volunteer Security, SecTeam-Processed, Security-Team, MediaWiki-User-management, 2026-user-javascript-incident, Product Safety and Integrity

Jul 9 2026

Rsilvola added a comment to T431633: Requesting access to analytics-privatedata-users for rscout.

Approved as Randall’s manager.

Jul 9 2026, 6:37 AM · SRE-Access-Requests

Jul 1 2026

Rsilvola added a comment to T430594: Requesting access to deployment for rscout.

Approving as Randall's manager.

Jul 1 2026, 3:37 PM · SRE, SRE-Access-Requests
Rsilvola updated the task description for T429243: Onboard Randall Scout to the Security Team.
Jul 1 2026, 9:36 AM · SecTeam-Processed, Security-Team

Jun 22 2026

Rsilvola updated the task description for T429243: Onboard Randall Scout to the Security Team.
Jun 22 2026, 4:46 PM · SecTeam-Processed, Security-Team
Rsilvola renamed T429601: Requesting access to #wmf-nda, #acl*security_team and #acl*security_secteam as member of the PSI Security Team from Requesting access to relevant Phab security groups as member of the PSI Security Team to Requesting access to #wmf-nda, #acl*security_team and #acl*security_secteam as member of the PSI Security Team.
Jun 22 2026, 4:45 PM · SecTeam-Processed, Security-Team
Rsilvola added a project to T428737: Create a page to be used for $wgOATH2FARequiredGroupRemovalPages for private wikis: FY2025-26 WE 4.6 - Account Security.
Jun 22 2026, 4:27 PM · FY2026-27 DE 4.3 - Volunteer Security, FY2025-26 WE 4.6 - Account Security, SecTeam-Processed, Wikimedia-Site-requests, Documentation, Security-Team

Jun 20 2026

Rsilvola added a comment to T429243: Onboard Randall Scout to the Security Team.

Create a Phabricator ticket to get added to necessary groups Phabricator groups: Trusted-Contributors

I'm not sure why this item is in the list; I'd propose to remove that and replace it by adding new folks to WMF-NDA instead.

Jun 20 2026, 10:18 AM · SecTeam-Processed, Security-Team
Rsilvola added a comment to T429243: Onboard Randall Scout to the Security Team.

...and link your ITS created work MediaWiki SUL account to your Phabricator account

This was not done; a self-created SUL account was linked instead, which could be an impersonation attempt (though the LDAP account looks legit).

Jun 20 2026, 10:17 AM · SecTeam-Processed, Security-Team
Rsilvola reassigned T429243: Onboard Randall Scout to the Security Team from Catrope to Rscout.
Jun 20 2026, 10:16 AM · SecTeam-Processed, Security-Team
Rsilvola updated the task description for T429243: Onboard Randall Scout to the Security Team.
Jun 20 2026, 10:15 AM · SecTeam-Processed, Security-Team

Jun 18 2026

Rsilvola added a comment to T429601: Requesting access to #wmf-nda, #acl*security_team and #acl*security_secteam as member of the PSI Security Team.

Approved as Randall's manager once 2fa is enabled on the account.

Jun 18 2026, 2:41 PM · SecTeam-Processed, Security-Team
Rsilvola added a comment to T429603: Requesting access to acl*security_team as member of the PSI Security Team.

Approved as Randall's manager once 2fa is enabled on the account.

Jun 18 2026, 2:41 PM · Product Safety and Integrity, Security-Team
Rsilvola added a comment to T429602: Requesting access to acl*security_secteam as member of the PSI Security Team.

Approved as Randall's manager once 2fa is enabled on the account.

Jun 18 2026, 2:41 PM · Security-Team, Product Safety and Integrity

Jun 17 2026

Rsilvola updated the task description for T429243: Onboard Randall Scout to the Security Team.
Jun 17 2026, 5:46 PM · SecTeam-Processed, Security-Team
Rsilvola added a comment to T418175: Create SLO for the opensearch-ipoid cluster that runs on our OpenSearch on K8s platform.

Signing off as engineering manager for the security team in PSI.

Jun 17 2026, 8:35 AM · Data-Platform-SRE (2026-07-03 - 2026-07-31)

Jun 15 2026

Rsilvola updated the task description for T429243: Onboard Randall Scout to the Security Team.
Jun 15 2026, 6:02 PM · SecTeam-Processed, Security-Team
Rsilvola created T429243: Onboard Randall Scout to the Security Team.
Jun 15 2026, 5:58 PM · SecTeam-Processed, Security-Team
Rsilvola added a comment to T415590: Upgrade service-utils's c12 dependency so it's not got a security warning from tar.

@Ottomata any news on this?

Jun 15 2026, 5:22 PM · Data-Engineering (Q4 FS25/26 April 1st - June 30st), Vuln-VulnComponent, SecTeam-Processed, service-utils, Security, Security-Team

Apr 28 2026

Rsilvola closed T423884: Add MFA to @Nicholusmuwonge_wmde Phabricator account as Resolved.

Great! @Nicholusmuwonge_wmde I've added you back to the ACL. Thank you!

Apr 28 2026, 5:06 PM · SecTeam-Processed, Product Safety and Integrity, Security-Team, Security
Rsilvola added a member for acl*security_wmde: Nicholusmuwonge_wmde.
Apr 28 2026, 5:05 PM
Rsilvola reopened T423884: Add MFA to @Nicholusmuwonge_wmde Phabricator account as "In Progress".

Hello Nicholus!

Apr 28 2026, 3:49 PM · SecTeam-Processed, Product Safety and Integrity, Security-Team, Security

Apr 27 2026

Rsilvola assigned T424285: Flow ships Handlebars 3.0.0 with known security vulnerabilities to Catrope.
Apr 27 2026, 4:40 PM · Essential-Work, Vuln-VulnComponent, SecTeam-Processed, Security-Team, Security, StructuredDiscussions
Rsilvola added a comment to T423884: Add MFA to @Nicholusmuwonge_wmde Phabricator account.

@Nicholusmuwonge_wmde, lacking response after a week, we are removing your access to security issues until you enable MFA on Phabricator as per instructions in the description.

Apr 27 2026, 4:13 PM · SecTeam-Processed, Product Safety and Integrity, Security-Team, Security
Rsilvola removed a member for acl*security_wmde: Nicholusmuwonge_wmde.
Apr 27 2026, 4:13 PM

Mar 31 2026

Rsilvola closed T421873: Test notifier as Declined.
Mar 31 2026, 4:00 PM · SecTeam-Processed
Rsilvola created T421874: Test PSI notifier.
Mar 31 2026, 11:57 AM · Trash, Product Safety and Integrity
Rsilvola created T421873: Test notifier.
Mar 31 2026, 11:55 AM · SecTeam-Processed

Mar 26 2026

Rsilvola moved T421406: Create a Mailing list account to replace Slack_connector_for_PSI_team_triage from Inbox to Triaged (backlog) on the Product Safety and Integrity board.
Mar 26 2026, 3:54 PM · Essential-Work, SecTeam-Processed, Release-Engineering-Team (Doing 😎), Product Safety and Integrity, Security-Team, Phabricator-Bot-Requests
Rsilvola moved T421406: Create a Mailing list account to replace Slack_connector_for_PSI_team_triage from Incoming to Waiting on the Security-Team board.
Mar 26 2026, 3:53 PM · Essential-Work, SecTeam-Processed, Release-Engineering-Team (Doing 😎), Product Safety and Integrity, Security-Team, Phabricator-Bot-Requests
Rsilvola created T421406: Create a Mailing list account to replace Slack_connector_for_PSI_team_triage.
Mar 26 2026, 3:31 PM · Essential-Work, SecTeam-Processed, Release-Engineering-Team (Doing 😎), Product Safety and Integrity, Security-Team, Phabricator-Bot-Requests
Rsilvola added a member for acl*security_bots: Slack_connector_for_TSP_team_triage.
Mar 26 2026, 1:43 PM

Mar 24 2026

Rsilvola added a project to T420631: CSP denies access to peerjs.com, used by ve.collab: Security-Team.
Mar 24 2026, 9:37 AM · SecTeam-Processed, MW-1.46-notes (1.46.0-wmf.22; 2026-03-31), Product Safety and Integrity, Security-Team, 2026-user-javascript-incident, VisualEditor, ContentSecurityPolicy
Rsilvola added a project to T420792: Allow 2FA to be enforced for all accounts on a private wiki: Security-Team.
Mar 24 2026, 9:21 AM · MW-1.47-notes (1.47.0-wmf.15; 2026-08-11), Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)), SecTeam-Processed, Security-Team, MediaWiki-extensions-OATHAuth
Rsilvola edited projects for T420792: Allow 2FA to be enforced for all accounts on a private wiki, added: Product Safety and Integrity (Sprint Forsythia (Mar 23 - Apr 10))); removed Product Safety and Integrity, Security-Team.
Mar 24 2026, 9:21 AM · MW-1.47-notes (1.47.0-wmf.15; 2026-08-11), Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)), SecTeam-Processed, Security-Team, MediaWiki-extensions-OATHAuth
Rsilvola added a project to T420792: Allow 2FA to be enforced for all accounts on a private wiki: Security-Team.
Mar 24 2026, 9:18 AM · MW-1.47-notes (1.47.0-wmf.15; 2026-08-11), Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22)), SecTeam-Processed, Security-Team, MediaWiki-extensions-OATHAuth

Mar 13 2026

Rsilvola moved T419502: Extensions and some localizations of InPageEdit NEXT are blocked by CSP from Inbox to Sprint Crocus (Mar 2 - Mar 20) on the Product Safety and Integrity board.
Mar 13 2026, 2:16 PM · Sustainability (Incident Followup), Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola moved T419318: Loading scripts or stylesheets from https://tools-static.wmflabs.org/cdnjs/ generates CSP warning from Inbox to Needs discussion / analysis on the Product Safety and Integrity board.
Mar 13 2026, 2:11 PM · SecTeam-Processed, Security-Team, Product Safety and Integrity, ContentSecurityPolicy, 2026-user-javascript-incident
Rsilvola moved T419464: Map tile sources for wikivoyage from Inbox to Needs discussion / analysis on the Product Safety and Integrity board.
Mar 13 2026, 2:11 PM · SecTeam-Processed, Security-Team, Patch-For-Review, 2026-user-javascript-incident, Product Safety and Integrity, ContentSecurityPolicy
Rsilvola moved T419531: Userscripts relying on https://qlever.dev do not work correctly from Inbox to Sprint Crocus (Mar 2 - Mar 20) on the Product Safety and Integrity board.
Mar 13 2026, 2:10 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola moved T419559: d:User:Lectrician1/discographies3.js & d:User:Lectrician1/embeds.js no longer working following CSP deployment from Inbox to Needs discussion / analysis on the Product Safety and Integrity board.
Mar 13 2026, 2:10 PM · Sustainability (Incident Followup), SecTeam-Processed, Security-Team, Product Safety and Integrity, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola moved T419343: Allowlisting request : other IIIF endpoints.. from Inbox to Sprint Crocus (Mar 2 - Mar 20) on the Product Safety and Integrity board.
Mar 13 2026, 2:04 PM · Sustainability (Incident Followup), Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, User-Inductiveload, ContentSecurityPolicy, All-and-every-Wikisource
Rsilvola moved T419752: Allow app.goacoustic.com in CSP for fundraising contact info collection from Inbox to Sprint Crocus (Mar 2 - Mar 20) on the Product Safety and Integrity board.
Mar 13 2026, 2:04 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, Fundraising-Backlog, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola moved T419841: Add wikipedia-archive.ourworldindata.org to Wikimedia's CSP allowlist from Inbox to Sprint Crocus (Mar 2 - Mar 20) on the Product Safety and Integrity board.
Mar 13 2026, 2:04 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419841: Add wikipedia-archive.ourworldindata.org to Wikimedia's CSP allowlist: SecTeam-Processed.
Mar 13 2026, 2:01 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419752: Allow app.goacoustic.com in CSP for fundraising contact info collection: SecTeam-Processed.
Mar 13 2026, 2:00 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, Fundraising-Backlog, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419559: d:User:Lectrician1/discographies3.js & d:User:Lectrician1/embeds.js no longer working following CSP deployment: SecTeam-Processed.
Mar 13 2026, 2:00 PM · Sustainability (Incident Followup), SecTeam-Processed, Security-Team, Product Safety and Integrity, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419531: Userscripts relying on https://qlever.dev do not work correctly: SecTeam-Processed.
Mar 13 2026, 2:00 PM · Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419502: Extensions and some localizations of InPageEdit NEXT are blocked by CSP: SecTeam-Processed.
Mar 13 2026, 2:00 PM · Sustainability (Incident Followup), Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, ContentSecurityPolicy
Rsilvola added a project to T419464: Map tile sources for wikivoyage: SecTeam-Processed.
Mar 13 2026, 2:00 PM · SecTeam-Processed, Security-Team, Patch-For-Review, 2026-user-javascript-incident, Product Safety and Integrity, ContentSecurityPolicy
Rsilvola added a project to T419318: Loading scripts or stylesheets from https://tools-static.wmflabs.org/cdnjs/ generates CSP warning: SecTeam-Processed.
Mar 13 2026, 2:00 PM · SecTeam-Processed, Security-Team, Product Safety and Integrity, ContentSecurityPolicy, 2026-user-javascript-incident
Rsilvola added a project to T419343: Allowlisting request : other IIIF endpoints..: SecTeam-Processed.
Mar 13 2026, 1:59 PM · Sustainability (Incident Followup), Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, User-Inductiveload, ContentSecurityPolicy, All-and-every-Wikisource
Rsilvola moved T419318: Loading scripts or stylesheets from https://tools-static.wmflabs.org/cdnjs/ generates CSP warning from Incoming to Waiting on the Security-Team board.
Mar 13 2026, 1:59 PM · SecTeam-Processed, Security-Team, Product Safety and Integrity, ContentSecurityPolicy, 2026-user-javascript-incident
Rsilvola moved T419343: Allowlisting request : other IIIF endpoints.. from Incoming to Waiting on the Security-Team board.
Mar 13 2026, 1:59 PM · Sustainability (Incident Followup), Product Safety and Integrity (Sprint Crocus (Mar 2 - Mar 20)), SecTeam-Processed, Security-Team, 2026-user-javascript-incident, User-Inductiveload, ContentSecurityPolicy, All-and-every-Wikisource