[tor-bugs] #23578 [Webpages/Webtools]: Don't include full path of error messages in OONI explorer's error page

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 19 10:15:54 UTC 2017


#23578: Don't include full path of error messages in OONI explorer's error page
-------------------------------+----------------------
 Reporter:  gk                 |          Owner:  hiro
     Type:  defect             |         Status:  new
 Priority:  Medium             |      Milestone:
Component:  Webpages/Webtools  |        Version:
 Severity:  Normal             |     Resolution:
 Keywords:                     |  Actual Points:
Parent ID:                     |         Points:
 Reviewer:                     |        Sponsor:
-------------------------------+----------------------

Comment (by hellais):

 I filed a ticket for this here: https://github.com/TheTorProject/ooni-
 explorer/issues/116.

 To be honest I don't consider this a security issue as all the paths that
 are disclosed there (and all paths in general for OONI infrastructure) are
 public anyways on our ooni-sysadmin repository (example for ooni-explorer:
 https://github.com/TheTorProject/ooni-sysadmin/blob/master/ansible/roles
 /ooni-explorer/vars/main.yml#L3).

 I think it's a good idea to do this, though, to improve the usability of
 the website.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23578#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list