Skip to content

Add domain expertise section for Dheeraj Joshi

Dheeraj Joshi requested to merge master-patch-a4f8 into master

Why is this change being made?

This change is to add frontend security to my domain expertise. I've been very keen and involved in this particular domain for a long time and would love to get involved officially.

Justification

I've taken number of initiatives to improve frontend security, listing few below

  1. Improve Frontend Security Posture (gitlab-org/gitlab#219124 - closed)
  2. https://gitlab.com/gitlab-org/gitlab/-/issues/327824+
  3. https://gitlab.com/gitlab-org/gitlab/-/issues/335699+
  4. Replace v-html with v-safe-html (gitlab-org&4273 - closed)
  5. Render GFM Mermaid diagrams in a sandboxed iframe (gitlab-org/gitlab!74414 - merged)

Other than that, I also review security related MRs and DOMPurify dependency upgrades frequently.

Screenshot of the change

https://master-patch-a4f8.about.gitlab-review.app/handbook/engineering/projects/#gitlab image

Author Checklist

  • Provided a concise title for this Merge Request (MR)
  • Added a description to this MR explaining the reasons for the proposed change, per say why, not just what
    • Copy/paste the Slack conversation to document it for later, or upload screenshots. Verify that no confidential data is added, and the content is SAFE
  • Assign reviewers for this MR to the correct Directly Responsible Individual/s (DRI)
    • If the DRI for the page/s being updated isn’t immediately clear, then assign it to one of the people listed in the Maintained by section on the page being edited
    • If your manager does not have merge rights, please ask someone to merge it AFTER it has been approved by your manager in #mr-buddies
    • The when to get approval handbook section explains the workflow in more detail
  • If the changes affect team members, or warrant an announcement in another way, please consider posting an update in #whats-happening-at-gitlab linking to this MR
    • If this is a change that directly impacts the majority of global team members, it should be a candidate for #company-fyi. Please work with internal communications and check the handbook for examples.
Edited by Dheeraj Joshi

Merge request reports