[tor-bugs] #23578 [Webpages/Webtools]: Don't include full path of error messages in OONI explorer's error page
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Sep 19 10:15:54 UTC 2017
#23578: Don't include full path of error messages in OONI explorer's error page
-------------------------------+----------------------
Reporter: gk | Owner: hiro
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Webpages/Webtools | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------+----------------------
Comment (by hellais):
I filed a ticket for this here: https://github.com/TheTorProject/ooni-
explorer/issues/116.
To be honest I don't consider this a security issue as all the paths that
are disclosed there (and all paths in general for OONI infrastructure) are
public anyways on our ooni-sysadmin repository (example for ooni-explorer:
https://github.com/TheTorProject/ooni-sysadmin/blob/master/ansible/roles
/ooni-explorer/vars/main.yml#L3).
I think it's a good idea to do this, though, to improve the usability of
the website.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23578#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list