Opened at 2008-04-15T02:23:16Z

Closed at 2013-05-13T01:01:42Z

#385 closed defect (duplicate)

webapi download with ?filename= should not log filename

Reported by: warner Owned by: davidsarah
Priority: major Milestone: 1.10.1
Component: code-frontend-web Version: 1.0.0
Keywords: web logging privacy Cc:
Launchpad Bug:

Description (last modified by daira)

I noticed today that our log-sanitizing is failing to remove the filenames specified as query arguments from the web hits that we log. This is closely related to #221 (give proper filenames on download). I think that if we make the download links use a filename as the last component of the URL (rather than in a query arg), then that will resolve this issue easily.

Change History (4)

comment:1 Changed at 2010-02-27T08:42:09Z by davidsarah

  • Milestone changed from eventually to 1.7.0

comment:2 Changed at 2010-05-30T21:35:17Z by zooko

  • Milestone changed from 1.7.0 to soon

comment:3 Changed at 2012-09-06T15:21:43Z by davidsarah

  • Milestone changed from soon to 1.11.0
  • Owner set to davidsarah
  • Status changed from new to assigned

comment:4 Changed at 2013-05-13T01:01:42Z by daira

  • Description modified (diff)
  • Resolution set to duplicate
  • Status changed from assigned to closed

Special case of #1904.

Note: See TracTickets for help on using tickets.