Skip to main content

Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #14936 The zip archive of a document folder should not be indicated as public information
    Infos
    #14936
    Thomas Gerbet (tgerbet)
    2020-06-04 09:23
    2020-06-02 12:04
    16196
    Details
    The zip archive of a document folder should not be indicated as public information
    When downloading the zip archive of a document folder some cache headers are set. Those cache headers mark the zip archive as public information which can incite a potential proxy server to serve the same archive to different users. This can lead to an information leak since permissions might not be respected.
    Doc/Documentation manager
    11.15
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-06-02
    Attachments
    Empty
    References
    Referenced by request #14936

    Artifact

    rel #14816 11.16

    Other

    gerrit #19073
    gerrit #19083
    Display settings

    Follow-ups