[tahoe-lafs-trac-stream] [tahoe-lafs] #860: Hiding introducer and helper furls and other private info reported by a node on its web interface

tahoe-lafs trac at tahoe-lafs.org
Thu Mar 21 23:13:46 UTC 2013


#860: Hiding introducer and helper furls and other private info reported by a
node on its web interface
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  davidsarah
  davidsarah             |     Status:  assigned
         Type:  defect   |  Milestone:  1.11.0
     Priority:  major    |    Version:  1.5.0
    Component:  code-    |   Keywords:  privacy security wui helper
  frontend-web           |  introducer anti-censorship
   Resolution:           |
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by davidsarah):

 The introducer and helper furl swissnums are censored as of
 [changeset:9be1a940/git]. I think that any remaining issues discussed here
 are covered by the following tickets:
 * #587 (Web nodes provide ambient upload authority)
 * #1447 (add read-only mode for gateways)
 * #1455 (WUI: ambiently accessible pages should framebust in order to
 prevent UI redressing attacks)
 * #1665 (Brainstorm webapi vulnerabilities between the operator and a user
 and between users.)
 * #1911 (Add authentication for WUI access)

 If so, we can close this ticket.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/860#comment:19>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list