[tor-bugs] #22947 [Webpages/Blog]: Possible Security Issue (Information Disclosure) with Drupal on blog.torproject.org

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Aug 11 19:02:15 UTC 2018


#22947: Possible Security Issue (Information Disclosure) with Drupal on
blog.torproject.org
---------------------------+--------------------------------
 Reporter:  cypherpunks    |          Owner:  hiro
     Type:  defect         |         Status:  needs_revision
 Priority:  Medium         |      Milestone:
Component:  Webpages/Blog  |        Version:
 Severity:  Normal         |     Resolution:
 Keywords:  security       |  Actual Points:
Parent ID:                 |         Points:
 Reviewer:                 |        Sponsor:
---------------------------+--------------------------------

Comment (by traumschule):

 I propose to [https://www.drupal.org/node/1172266 disable on-screen
 warnings] completely. Users cant act on errors, only admins reviewing a
 log can. Waiting for the next occurrence is the wrong approach in my eyes
 :)
 [https://www.drupal.org/project/errorlevelpermission module error level
 permission]

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22947#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list