Opened at 2008-04-15T02:23:16Z
Closed at 2013-05-13T01:01:42Z
#385 closed defect (duplicate)
webapi download with ?filename= should not log filename — at Version 4
Reported by: | warner | Owned by: | davidsarah |
---|---|---|---|
Priority: | major | Milestone: | 1.10.1 |
Component: | code-frontend-web | Version: | 1.0.0 |
Keywords: | web logging privacy | Cc: | |
Launchpad Bug: |
Description (last modified by daira)
I noticed today that our log-sanitizing is failing to remove the filenames specified as query arguments from the web hits that we log. This is closely related to #221 (give proper filenames on download). I think that if we make the download links use a filename as the last component of the URL (rather than in a query arg), then that will resolve this issue easily.
Change History (4)
comment:1 Changed at 2010-02-27T08:42:09Z by davidsarah
- Milestone changed from eventually to 1.7.0
comment:2 Changed at 2010-05-30T21:35:17Z by zooko
- Milestone changed from 1.7.0 to soon
comment:3 Changed at 2012-09-06T15:21:43Z by davidsarah
- Milestone changed from soon to 1.11.0
- Owner set to davidsarah
- Status changed from new to assigned
comment:4 Changed at 2013-05-13T01:01:42Z by daira
- Description modified (diff)
- Resolution set to duplicate
- Status changed from assigned to closed
Note: See
TracTickets for help on using
tickets.
Special case of #1904.