1172191 - Secreview request for Triage bot.

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance: Review Request, task)

Description

[Mike Hoye [:mhoye]]

I would like to make my TriageBot sign-up-to-get-emails bug tool - currently living at triage1.dmz.slc3  - available to internet-facing participants, which perhaps obviously means exposing it to arbitrary user input.

Before doing that, I'd like security review of said code. It lives here:

https://github.com/mhoye/Canutist/

Thanks.

Comment 1

[Yvan Boily [:ygjb][:yvan]]

I don't see any blockers here, it seems pretty straightforward.

I would recommend including a link to instructions to opt-out of emails to prevent running afoul of anti-spam regulations, but I am not sure how important that is.