Making WordPress.org

Changes between Initial Version and Version 1 of Ticket #3962, comment 3


Ignore:
Timestamp:
11/28/2018 10:13:59 PM (6 years ago)
Author:
chriscct7
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #3962, comment 3

    initial v1  
    99With option 2, we'd need to be careful that someone can't just start hitting that endpoint directly or crafting inline HTML to trigger that process.
    1010
    11 With option 1, I'm not sure that assumption can be assumed. For example, with ticket 45419 (whose number did not get reused), I only noticed it after maybe 30 - 60 minutes of it being submitted, then posted in security to see if anyone else concurred with my thought that it should be pulled, and IanDunn deleted it about 20 minutes later, once a mini-consensus was established. Particularly for busy trac days (in terms of gardening), periods of the day (especially weekends) where most people are not monitoring slack, and times when a lot of things are going on in Slack, tickets might not be noticed right away.
     11With option 1, I'm not sure that assumption can be assumed. For example, with ticket 45419 (whose number did not get reused), I only noticed it after maybe 30 - 60 minutes of it being submitted, then posted in security to see if anyone else concurred with my thought that it should be pulled, and IanDunn deleted it about 20 minutes later, once a mini-consensus was established, so in that example (and most others) 5 minutes would not be enough time. Particularly for busy trac days (in terms of gardening), periods of the day (especially weekends) where most people are not monitoring slack, and times when a lot of things are going on in Slack, tickets might not be noticed right away.