[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [TSVN] Propfind request failed.

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: 2006-12-05 19:14:11 CET

Peter McNab wrote:

> When a log view for a rev is shown, where a file has been deleted, as
> indicated in the bottom pane, double clicking on the name of the deleted
> file invokes an error dialog.
>
> "PROPFIND request failed on" followed by the full path to what looks
> like the location within the repository .
> The message then repeated the same full path followed by the words "path
> not found".
> This raises two issues.
>
> Maybe the user double click on deleted files could be intercepted and
> either totally ignored or replaced with a TSVN generated friendlier
> message. This isn't something I'm adamant about, because it does tell
> you what was wrong but the text is small and needs careful reading.

Changed in revision 8238:
the file is now opened in the default application instead of diffed.

> The second issue is the broadcast of the repository internal path which
> maybe someone more net savy might consider a security issue. I'm not
> saying it is, just asking the question.
>
> In my case it read
> '/svn/SpecialsRepos/!svn/bc/463/Branches/... followed by the remainder
> of the path and filename.

This would then maybe be best reported on the Subversion mailing list.
But I don't think this is a security issue:
the URL you see there is relative to the repository root. This is no
more dangerous than someone trying out URLs on your server.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: dev-help@tortoisesvn.tigris.org
Received on Tue Dec 5 19:14:24 2006

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.