998126 - SecReview: Bitly plugin for WordPress

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance: Review Request, task)

Description

[David Weir (satdav)]

Who is/are the point of contact(s) for this review? Satdav or you can speak to Craig Cook about it 
    Please provide a short description of the feature / application (e.g. problem solved, use cases, etc.): For sharing Blog Posts more easier for mozilla blog
    Please provide links to additional information (e.g. feature page, wiki) if available and not yet included in feature description: http://wordpress.org/plugins/bitly/
    Does this request block another bug? If so, please indicate the bug number
n/a
    This review will be scheduled amongst other requested reviews. What is the urgency or needed completion date of this review?
This can be done when free or have a minute time

    To help prioritize this work request, does this project support a goal specifically listed on this quarter's goal list? If so, which goal?
    Please answer the following few questions: (Note: If you are asked to describe anything, 1-2 sentences shall suffice.)
n/a
        Does this feature or code change affect Firefox, Thunderbird or any product or service the Mozilla ships to end users?
n/a unless you include the soical sites
        Are there any portions of the project that interact with 3rd party services?
Yes to the bit.ly api system
        Will your application/service collect user data? If so, please describe 
n/a
    If you feel something is missing here or you would like to provide other kind of feedback, feel free to do so here (no limits on size):
    Desired Date of review (if known from https://mail.mozilla.com/home/[e-mail]/Security%20Review.html) and whom to invite. 

When ever you are free

Comment 1

[Craig Cook (:craigcook)]

To more clearly summarize this request...

We'd like a security review of the Bitly WordPress plugin (http://wordpress.org/plugins/bitly/) so it can be used on blog.mozilla.org and possibly other Mozilla-hosted WordPress sites. It's not urgent and doesn't block any other bugs, so whenever you can fit it into the review queue it would be much appreciated.

Comment 2

[Adam Muntner [:adamm] (use NEEDINFO)]

Could someone post a link for the repo where the theme this plugin is to be used with? Thank you.

Comment 3

[Craig Cook (:craigcook)]

(In reply to Adam Muntner :adamm from comment #2)
> Could someone post a link for the repo where the theme this plugin is to be
> used with? Thank you.

The "One Mozilla" theme in use on most of the main PR blogs lives at https://github.com/mozilla/One-Mozilla-blog

Comment 4

[Adam Muntner [:adamm] (use NEEDINFO)]

Thanks Craig. I should have known that from comment 1. :)

Before I get started with the review, there is going to be some compatibility testing done

Some users are having problems with it
http://wordpress.org/support/view/plugin-reviews/bitly

Wordpress svn says it's only tested up to 3.5.1 
http://plugins.svn.wordpress.org/bitly/trunk/readme.txt

Once we know it will work I'll start the review.

Comment 5

[Craig Cook (:craigcook)]

(In reply to Adam Muntner :adamm from comment #4)
> Thanks Craig. I should have known that from comment 1. :)
> 
> Before I get started with the review, there is going to be some
> compatibility testing done

Hm yeah, and it was last updated 8 months ago. I wonder if bitly has abandoned it. There are a few other link shortening plugins that use bitly, they might be worth looking into if the official one is dead.

Comment 6

[Adam Muntner [:adamm] (use NEEDINFO)]

Craig, when you find another that you'd like to use, please needinfo me in this bug and post the link. Thank you.

Comment 7

[Adam Muntner [:adamm] (use NEEDINFO)]

I'm going to close this bug. Please open a new review bug when there's a new review target selected.