helpSavannah Administration - Support: sr #109454, Private bugs fail on HTTP e-mail...

 
 

sr #109454: Private bugs fail on HTTP e-mail link, not redirected to HTTPS

Submitted by:  Jay Satiro <raysatiro>
Submitted on:  Thu 25 Jan 2018 06:49:36 PM UTC  
 
Category:  Savannah website Priority:  5 - Normal
Severity:  3 - Normal Status:  None
Assigned to:  None Operating System:  None
Open/Closed:  Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 25 Jan 2018 09:32:59 PM UTC, comment #1:

There is an open TODO item to switch the email links from http to https. It will get done eventually.

That you submitted a bug to a project that has marked it as a private item is unrelated to whether the link is http or https. Either will say the item is a private item. Both say that for me for that link for example. Since that project has made their tickets private.

However if you are logged into the site and have permission to view the ticket then your cookie is a secure cookie and will only be sent to https which will give you permission but not to http and therefore you won't be logged in on http and won't have permission. It is somewhat of a subtle thing but not the primary issue but just a cascade behind it.

Personally I much prefer email to savannah-hackers-public AT gnu.org or savannah-hackers-private AT gnu.org for security issues or other discussion. I find email much easier to deal with. It's a personal preference.

Bob Proulx <rwp>
Site Administrator
Thu 25 Jan 2018 06:49:36 PM UTC, original submission:

I submitted a private bug to the wget team and I am receiving e-mail updates. The e-mail update includes an HTTP link to the bug, but it does not redirect to HTTPS. Instead it says 'This item is private.'

No: http://savannah.gnu.org/bugs/?52760
Yes: https://savannah.gnu.org/bugs/?52760

Also this form to file a bug against the website was hard to find, I suggest putting at the bottom of the page "Report a bug in this website" or something

Jay Satiro <raysatiro>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #43075:  Capture.PNG added by raysatiro (3KiB - image/png)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by raysatiro (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-01-25 raysatiro Attached File- => Added Capture.PNG, #43075

    Back to the top


    Powered by Savane 3.3