Change Details

* Name of the software: ** DoubleWiki Extension * Link to code repository of the software: ** https://gerrit.wikimedia.org/g/mediawiki/extensions/DoubleWiki * Link to homepage of the software (if existing): ** https://www.mediawiki.org/wiki/Extension:DoubleWiki * Succinct problem statement to give context for why the review was initiated: ** This extension has a security issue that needs to be addressed and has not been. See https://phabricator.wikimedia.org/T323651#8720153 for more details. //The following bullet points are optional - please fill them out if feasible, but this is not a hard requirement:// * Current entry in [mw:Developers/Maintainers](https://www.mediawiki.org/wiki/Developers/Maintainers): ** Listed Code Steward: https://phabricator.wikimedia.org/p/Tpt/ ** Listed Maintainer: none ** Listed In-training: none * Number, severity, and age of known and confirmed security issues: ** 1 high priority security issue: https://phabricator.wikimedia.org/T323651 * Was it a cause of production outages or incidents? List them: ** not yet but it could be * Does it have sufficient hardware resources for now and the near future (to take into account expected usage growth)? ** * Is it a frequent cause of monitoring alerts that need action, and are they addressed timely and appropriately? ** * When it was first deployed to Wikimedia production: ** * Usage statistics based on audience(s) served: ** * Code changes committed in last 1, 3, 6, and 12 months: ** * Reliance on outdated platforms (e.g. operating systems): ** * Number of developers who committed code in the last 1, 3, 6, and 12 months: ** * Number and age of open patches: ** * Number and age of open bugs: ** * Number of known dependencies: ** * Is there a replacement/alternative for the feature? Is there a plan for a replacement? ** * Submitter's recommendation (what do you propose be done?): **

* Name of the software: ** DoubleWiki Extension * Link to code repository of the software: ** https://gerrit.wikimedia.org/g/mediawiki/extensions/DoubleWiki * Link to homepage of the software (if existing): ** https://www.mediawiki.org/wiki/Extension:DoubleWiki * Succinct problem statement to give context for why the review was initiated: ** This extension has a security issue that needs to be addressed and has not been. See https://phabricator.wikimedia.org/T323651#8720153 for more details. //The following bullet points are optional - please fill them out if feasible, but this is not a hard requirement:// * Current entry in [mw:Developers/Maintainers](https://www.mediawiki.org/wiki/Developers/Maintainers): ** Listed Code Steward: https://phabricator.wikimedia.org/p/Tpt/ ** Listed Maintainer: none ** Listed In-training: none * Number, severity, and age of known and confirmed security issues: ** 1 high priority security issue: https://phabricator.wikimedia.org/T323651 * Was it a cause of production outages or incidents? List them: ** not yet but it could be * Does it have sufficient hardware resources for now and the near future (to take into account expected usage growth)? ** * Is it a frequent cause of monitoring alerts that need action, and are they addressed timely and appropriately? ** * When it was first deployed to Wikimedia production: ** 2006 or earlier (https://wikisource.org/w/index.php?title=Wikisource:DoubleWiki_Extension&action=history) * Usage statistics based on audience(s) served: ** * Code changes committed in last 1, 3, 6, and 12 months: ** 1 month: Only translation updates ** 3 months: 1 human commit ** 6 months: 2 human commits ** 12 months: 2 human commits * Reliance on outdated platforms (e.g. operating systems): ** * Number of developers who committed code in the last 1, 3, 6, and 12 months: ** 1 month: 0 ** 3 months: 1 ** 6 months: 2 ** 12 months: 2 * Number and age of open patches: ** [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/DoubleWiki/+/673696 | 1 patch, from 2021, with a merge conflict ]] * Number and age of open bugs: ** 7 tasks, 1 from 2011, others are from 2018 or later * Number of known dependencies: ** None * Is there a replacement/alternative for the feature? Is there a plan for a replacement? ** * Submitter's recommendation (what do you propose be done?): **

* Name of the software: ** DoubleWiki Extension * Link to code repository of the software: ** https://gerrit.wikimedia.org/g/mediawiki/extensions/DoubleWiki * Link to homepage of the software (if existing): ** https://www.mediawiki.org/wiki/Extension:DoubleWiki * Succinct problem statement to give context for why the review was initiated: ** This extension has a security issue that needs to be addressed and has not been. See https://phabricator.wikimedia.org/T323651#8720153 for more details. //The following bullet points are optional - please fill them out if feasible, but this is not a hard requirement:// * Current entry in [mw:Developers/Maintainers](https://www.mediawiki.org/wiki/Developers/Maintainers): ** Listed Code Steward: https://phabricator.wikimedia.org/p/Tpt/ ** Listed Maintainer: none ** Listed In-training: none * Number, severity, and age of known and confirmed security issues: ** 1 high priority security issue: https://phabricator.wikimedia.org/T323651 * Was it a cause of production outages or incidents? List them: ** not yet but it could be * Does it have sufficient hardware resources for now and the near future (to take into account expected usage growth)? ** * Is it a frequent cause of monitoring alerts that need action, and are they addressed timely and appropriately? ** * When it was first deployed to Wikimedia production: ** 2006 or earlier (https://wikisource.org/w/index.php?title=Wikisource:DoubleWiki_Extension&action=history) * Usage statistics based on audience(s) served: ** * Code changes committed in last 1, 3, 6, and 12 months: ** 1 month: Only translation updates ** 3 months: 1 human commit ** 6 months: 2 human commits ** 12 months: 2 human commits * Reliance on outdated platforms (e.g. operating systems): ** * Number of developers who committed code in the last 1, 3, 6, and 12 months: ** 1 month: 0 ** 3 months: 1 ** 6 months: 2 ** 12 months: 2 * Number and age of open patches: ** [[ https://gerrit.wikimedia.org/r/c/mediawiki/extensions/DoubleWiki/+/673696 | 1 patch, from 2021, with a merge conflict ]] * Number and age of open bugs: ** 7 tasks, 1 from 2011, others are from 2018 or later * Number of known dependencies: ** None * Is there a replacement/alternative for the feature? Is there a plan for a replacement? ** * Submitter's recommendation (what do you propose be done?): **