On Tue, 1 Nov 2005, Daniel Rall wrote:
> On Tue, 01 Nov 2005, Julian Foad wrote:
>
> > So, I vote for removing the path to the repository filesystem from all of
> > the error messages in subversion/libsvn_fs_{base,fs}/err.c
> >
> The route that has been taken in other places is not to remove
> information from the error's message, but to filter out info from or
> replace messages which contain possibly sensitive info at the
> appropriate layer (see mod_dav_svn for an example). I prefer this
> approach on the principle that error messages should always be
> self-sufficient, and contain as much context as they have available to
> them when the error is encountered. The fact that a caller may (or
> may not) have this context available is something I prefer not to have
> to consider. Instead, we have today's situation, which while isn't
> always convenient, is not unreasonable, either.
>
What do you do when you have both useful information and sensitive
information, i.e. "File locked by user 'blah' in filesystem
'/blah/blah2'"?
Regards,
//Peter
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Nov 2 09:25:30 2005