Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #18473 Strip metadata of images
    Actions
    Infos
    #18473
    Thomas Gerbet (tgerbet)
    2020-12-21 15:06
    2020-12-21 09:50
    20022
    Details
    Strip metadata of images

    Images uploaded as tracker attachment or files in the FRS or Document service are not changed in any way.

    It would be nice to strip all the metadata of the images when not needed (metadata are used by the Mediawiki service but outside of that we have no need for them) to prevent users to inadvertently leak locations or other PI.

    Acknowledgement: this issue has been reported by Shubham Shete via the Tuleap coordinated disclosure process.

    Other
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Verified
    Empty
    Attachments
    Empty
    References
    References list is empty
    Display settings

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2020-12-21 15:06
    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar
    Thomas Gerbet (tgerbet)2020-12-21 10:15
    Note this can cause issue for people expecting to have those information. A way to disable the mechanism should be available (granularity to be defined, a global switch in the site administration might be enough?).