Smalltalkhub is exposing private information
When you look at someones page you can read commit messages of packages that belong to a private project. You can't see the project nor the package but it is listed in recent activities. I filed a bug https://code.google.com/p/smalltalk-hub/issues/detail?id=32 Norbert
Yes, and also post-commit url's should not be visible to everyone, as this can provide someone the data which can be used to spam ci server with jobs for example. I don't know how important is smalltalkhub anyway. uko On Oct 17, 2013, at 11:40 AM, Norbert Hartl <norbert@hartl.name> wrote:
When you look at someones page you can read commit messages of packages that belong to a private project. You can't see the project nor the package but it is listed in recent activities. I filed a bug
https://code.google.com/p/smalltalk-hub/issues/detail?id=32
Norbert
Thanks, I'll fix the issue with the next release (It's overdue already). Cheers, Nico Norbert Hartl writes:
When you look at someones page you can read commit messages of packages that belong to a private project. You can't see the project nor the package but it is listed in recent activities. I filed a bug
https://code.google.com/p/smalltalk-hub/issues/detail?id=32
Norbert
-- Nicolas Petton http://nicolas-petton.fr
Nicolas Petton wrote
Thanks, I'll fix the issue with the next release (It's overdue already).
Was this ever fixed? I'd like to host a private project on sthub, but this is preventing me... ----- Cheers, Sean -- View this message in context: http://forum.world.st/Smalltalkhub-is-exposing-private-information-tp4715223... Sent from the Pharo Smalltalk Developers mailing list archive at Nabble.com.
participants (4)
-
Nicolas Petton -
Norbert Hartl -
Sean P. DeNigris -
Yuriy Tymchuk