[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #23578 [Webpages/Webtools]: Don't include full path of error messages in OONI explorer's error page

#23578: Don't include full path of error messages in OONI explorer's error page
-------------------------------+----------------------
 Reporter:  gk                 |          Owner:  hiro
     Type:  defect             |         Status:  new
 Priority:  Medium             |      Milestone:
Component:  Webpages/Webtools  |        Version:
 Severity:  Normal             |     Resolution:
 Keywords:                     |  Actual Points:
Parent ID:                     |         Points:
 Reviewer:                     |        Sponsor:
-------------------------------+----------------------

Comment (by hellais):

 I filed a ticket for this here: https://github.com/TheTorProject/ooni-
 explorer/issues/116.

 To be honest I don't consider this a security issue as all the paths that
 are disclosed there (and all paths in general for OONI infrastructure) are
 public anyways on our ooni-sysadmin repository (example for ooni-explorer:
 https://github.com/TheTorProject/ooni-sysadmin/blob/master/ansible/roles
 /ooni-explorer/vars/main.yml#L3).

 I think it's a good idea to do this, though, to improve the usability of
 the website.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23578#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs