MDN/Development/Features: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Created page with "{| class="fullwidth-table sortable" | style="background: #EFEFEF;" | '''Priority<br />''' | style="background: #EFEFEF;" | '''Component<br />''' | style="background: #EFEFEF;"...")
 
No edit summary
Line 9: Line 9:
  | P1
  | P1
  | Security
  | Security
  | Bleach per page (tree) rules, can be edited without code push (admin tool)
  | Admin tool for editing Bleach settings per page / tree
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
Line 16: Line 16:
  | P1
  | P1
  | Security
  | Security
  | Cross-site scripting bug from security review, need to upgrade CKEditor to fix
  | <!-- Upgrade CKEditor to fix XSS bug mentioned in security review -->
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
Line 23: Line 23:
  | P1
  | P1
  | Security
  | Security
  | Way we serve file attachments right now is very insecure, need to make changes (make it more like how we do demo studio).
  | Improve the way we serve file attachments to be more like what we do on the Demo Studio
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
Line 30: Line 30:
  | P1
  | P1
  | Security
  | Security
  | Restrict types of files that can be uploaded, e.g. MSWord; create filetype whitelist. Images, html, txt/source files, .zip archive...
  | Restrict the types of files that can be uploaded
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
* Images, html, txt/source files, .zip archive, etc.


  |-
  |-
  | P1
  | P1
  | Security
  | Security
  | We currently don't validate redirects, you can redirect to anything - need to only allow redirect within MDN, no external redirect. Need to validate redirects (scheme/host)
  | Validate redirects and disallow external redirects
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
* Need to validate redirects (scheme/host)


  |-
  |-
  | P1
  | P1
  | Localization
  | Localization
  | Ability to set Non-English as source language for translation
  | Ability to set non-English article as source language for translation
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
Line 65: Line 67:
  | P1
  | P1
  | Dashboards
  | Dashboards
  | Implement Eslatic search to enable Dashboards/filtering
  | Implement Elastic search to enable Dashboards/filtering
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
Line 76: Line 78:
  |  
  |  
  | <!-- Notes -->
  | <!-- Notes -->
* [https://wiki.mozilla.org/MDN/Development/Offsites/Toronto_2012/Features/jsFiddle_meeting Meeting notes]


  |}
  |}

Revision as of 17:58, 19 September 2012

Priority
Component
Feature
Meta bug
Notes
P1 Security Admin tool for editing Bleach settings per page / tree
P1 Security
P1 Security Improve the way we serve file attachments to be more like what we do on the Demo Studio
P1 Security Restrict the types of files that can be uploaded
  • Images, html, txt/source files, .zip archive, etc.
P1 Security Validate redirects and disallow external redirects
  • Need to validate redirects (scheme/host)
P1 Localization Ability to set non-English article as source language for translation
P1 API Writing API
P1 SEO Improvements to page title: 1) allow to edit title. 2) make title and H1 of the page different. 3)Use most specific first, e.g. animation-CSS-MDN. Use the real/full breadcrumb, such as in javascript, but able to edit manually if needed end with MDN
P1 Dashboards Implement Elastic search to enable Dashboards/filtering


P1 Editing Meet with Piotr about Live Examples