[tahoe-lafs-trac-stream] [tahoe-lafs] #2090: Don't expose URIs after failed CLI commands

tahoe-lafs trac at tahoe-lafs.org
Fri Oct 4 16:52:51 UTC 2013


#2090: Don't expose URIs after failed CLI commands
------------------------+---------------------------
 Reporter:  markberger  |          Owner:  daira
     Type:  defect      |         Status:  new
 Priority:  normal      |      Milestone:  undecided
Component:  unknown     |        Version:  1.10.0
 Keywords:              |  Launchpad Bug:
------------------------+---------------------------
 When calling `bin/tahoe list-aliases`, URIs are knowingly exposed by the
 user and subsequently logged by the console. However, URIs can also be
 exposed in error messages that the user is not expecting. For example, if
 tahoe is not running and the user types `bin/tahoe ls tahoe:`, the
 following error message appears:

 {{{
 Error during GET: -1 Error trying to connect to
 http://127.0.0.1:3456/uri/URI%3ADIR2%3A6dxjh4twxqwlr4dzdlpnhvcd3e%3Anrnqj56icfypdlhqvdcshrpyjfk3dayqencxp6gyxmkae6a62adqnq?t=json:
 [Errno 61] Connection refused
 }}}

 URIs should not be exposed in such error messages and they should only be
 exposed when the user asks for them.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2090>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list