mainSavannah Administration - Support: sr #109454, Private bugs fail on HTTP e-mail...

 
 

sr #109454: Private bugs fail on HTTP e-mail link, not redirected to HTTPS

Submitter:  Jay Satiro <raysatiro>
Submitted:  Thu 25 Jan 2018 06:49:36 PM UTC
   
 
Category:  Savannah website Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  ineiev
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 06 Sep 2018 08:09:03 AM UTC, comment #2: 

Done.

Ineiev <ineiev>
Site Administrator
Thu 25 Jan 2018 09:32:59 PM UTC, comment #1: 

There is an open TODO item to switch the email links from http to https.  It will get done eventually.

That you submitted a bug to a project that has marked it as a private item is unrelated to whether the link is http or https.  Either will say the item is a private item.  Both say that for me for that link for example.  Since that project has made their tickets private.

However if you are logged into the site and have permission to view the ticket then your cookie is a secure cookie and will only be sent to https which will give you permission but not to http and therefore you won't be logged in on http and won't have permission.  It is somewhat of a subtle thing but not the primary issue but just a cascade behind it.

Personally I much prefer email to savannah-hackers-public AT gnu.org or savannah-hackers-private AT gnu.org for security issues or other discussion.  I find email much easier to deal with.  It's a personal preference.

Bob Proulx <rwp>
Site Administrator
Thu 25 Jan 2018 06:49:36 PM UTC, original submission:  

I submitted a private bug to the wget team and I am receiving e-mail updates. The e-mail update includes an HTTP link to the bug, but it does not redirect to HTTPS. Instead it says 'This item is private.'

No: http://savannah.gnu.org/bugs/?52760
Yes: https://savannah.gnu.org/bugs/?52760

Also this form to file a bug against the website was hard to find, I suggest putting at the bottom of the page "Report a bug in this website" or something

Jay Satiro <raysatiro>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #43075:  Capture.PNG added by raysatiro (3KiB - image/png)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ineiev (Posted a comment)
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by raysatiro (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-09-06 ineiev StatusNone Done
        Assigned toNone ineiev
        Open/ClosedOpen Closed
    2018-01-25 raysatiro Attached File- Added Capture.PNG, #43075

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code