[tahoe-lafs-trac-stream] [tahoe-lafs] #385: webapi download with ?filename= should not log filename

tahoe-lafs trac at tahoe-lafs.org
Mon May 13 01:01:42 UTC 2013


#385: webapi download with ?filename= should not log filename
-----------------------------------+---------------------------------
     Reporter:  warner             |      Owner:  davidsarah
         Type:  defect             |     Status:  closed
     Priority:  major              |  Milestone:  1.11.0
    Component:  code-frontend-web  |    Version:  1.0.0
   Resolution:  duplicate          |   Keywords:  web logging privacy
Launchpad Bug:                     |
-----------------------------------+---------------------------------
Changes (by daira):

 * status:  assigned => closed
 * resolution:   => duplicate


Old description:

> I noticed today that our log-sanitizing is failing to remove the
> filenames specified as query arguments from the web hits that we log.
> This is closely related to #221 (give proper filenames on download).
> I think that if we make the download links use a filename as the last
> component of the URL (rather than in a query arg), then that will resolve
> this issue easily.

New description:

 I noticed today that our log-sanitizing is failing to remove the filenames
 specified as query arguments from the web hits that we log. This is
 closely related to #221 (give proper filenames on download).
 I think that if we make the download links use a filename as the last
 component of the URL (rather than in a query arg), then that will resolve
 this issue easily.

--

Comment:

 Special case of #1904.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/385#comment:4>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list