Closed Bug 523521 Opened 12 years ago Closed 12 years ago

Finding a way to host bugzilla iFrames on wiki.mozilla.org (protected template?)

Categories

(mozilla.org Graveyard :: Server Operations: Projects, task)

All
Other
task
Not set
minor

Tracking

(Not tracked)

RESOLVED INCOMPLETE

People

(Reporter: faaborg, Assigned: fox2mike)

Details

[not sure if this is the right component, please change if there is a better place to file wiki.mozilla.org bugs]

The Firefox team is now managing all work through wiki.mozilla.org, with each major area of work being given a project page.  Each project page is subsequently supposed to link to all of the relevant bugs on bugzilla.mozilla.org for implementation.

Ideally we would be able to use a protected template on wiki.mozilla.org that hosted Bugzilla dependency trees in an iFrame, so we wouldn't have to manually manage bug lists across two different sites. (which is tedious and error prone).

I know there are a lot of serious cross site scripting vulnerabilities involved with allowing html on a wiki, but is there anyway we could securely allow for inline bugzilla.mozilla.org dependency trees on wiki.mozilla.org?
Assignee: server-ops → shyam
Probably the safest thing would be to implement some markup for it in an extension dedicated for that purpose.
Group: infra
http://www.mediawiki.org/wiki/Extension:BugzillaReports is pretty neat... Too bad it requires read access to the database, which won't ever happen.
Chris, this is basically looking for a custom MediaWiki extention - any security concerns?
Component: Server Operations: Web Content Push → Server Operations: Projects
(In reply to comment #3)
> Chris, this is basically looking for a custom MediaWiki extention - any
> security concerns?


So an extension that would connect to the bugzilla database to display bugs?
If that is the case, yeah there are security concerns.
I don't think this is going anywhere, been stuck at ideas for a while and we obviously can't allow access to the DB. 

Reopen with better ideas if any?
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → INCOMPLETE
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.