[tahoe-lafs-trac-stream] [tahoe-lafs] #385: webapi download with ?filename= should not log filename
tahoe-lafs
trac at tahoe-lafs.org
Mon May 13 01:01:42 UTC 2013
#385: webapi download with ?filename= should not log filename
-----------------------------------+---------------------------------
Reporter: warner | Owner: davidsarah
Type: defect | Status: closed
Priority: major | Milestone: 1.11.0
Component: code-frontend-web | Version: 1.0.0
Resolution: duplicate | Keywords: web logging privacy
Launchpad Bug: |
-----------------------------------+---------------------------------
Changes (by daira):
* status: assigned => closed
* resolution: => duplicate
Old description:
> I noticed today that our log-sanitizing is failing to remove the
> filenames specified as query arguments from the web hits that we log.
> This is closely related to #221 (give proper filenames on download).
> I think that if we make the download links use a filename as the last
> component of the URL (rather than in a query arg), then that will resolve
> this issue easily.
New description:
I noticed today that our log-sanitizing is failing to remove the filenames
specified as query arguments from the web hits that we log. This is
closely related to #221 (give proper filenames on download).
I think that if we make the download links use a filename as the last
component of the URL (rather than in a query arg), then that will resolve
this issue easily.
--
Comment:
Special case of #1904.
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/385#comment:4>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list