Re: Suppress display of sensitive info by servers (proposal)

On 2005-04-13 14:47:11 +0200, Molle Bestefich wrote:
> Argumentation a bit flawed.. How does the administrator find the
> relevant Apache error log?
> (S)he doesn't know which Apache server the user is talking about,
> since that information is not in the (new) error message.. It's not
> in the old either, but the path gives a kind of hint.
>
> Anyway, this is not an important discussion by any length, since
> well-behaving users should report the context in which they're seeing
> any error. Just thought I'd mention that if it was easy to implement
> and you're hacking on it anyway, the context would be nice to include
> automatically in the error message (in a non-security-breaching way).

i am one of the complainers about this disclosure. i want to host svn
for people. but they should not know where the repos is on the disk. i
think an administrator can get the needed informations from the url
("svn info"). so i think a user/administrator can get all needed
informations to solve the problems. Why does the path needs to be
exposed to the user?

darix

-- 
irssi - the client of the smart and beautiful people
              http://www.irssi.de/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org