Last modified: 2014-06-18 17:29:49 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T68378, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 66378 - Security review of Property Suggestor - python part
Security review of Property Suggestor - python part
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
General/Unknown (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Chris Steipp
:
Depends on:
Blocks: 63368 66382
  Show dependency treegraph
 
Reported: 2014-06-09 17:03 UTC by Greg Grossmeier
Modified: 2014-06-18 17:29 UTC (History)
4 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Greg Grossmeier 2014-06-09 17:03:55 UTC

    
Comment 1 Chris Steipp 2014-06-18 16:59:32 UTC
I believe the plan is for this to not run on the cluster, rather the parsing will be done somewhere else and the csv will be uploaded and imported.

If someone can confirm that's the case, then we can close this now. Otherwise, the code isn't hostile, but we need to have a defined plan for how it's going to run in production to determine if there are any missing controls.
Comment 2 Lydia Pintscher 2014-06-18 17:01:53 UTC
We're fine either way for now.
Comment 3 Chris Steipp 2014-06-18 17:29:49 UTC
Plan from Nik is, "Lets assume for the next few months this'll be manually run and uploaded to the cluster.  Or run in labs where the dumps are right there for reading."

If that changes, we'll want to evaluate that process separately.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links