This site is an archive; learn more about 8 years of OpenHatch.

[OH-Dev] [issue857] oh-bugimporters: Refuse to follow cross-domain redirects (within Bugzilla importer)

Asheesh Laroia bugs at openhatch.org
Fri May 17 11:09:57 UTC 2013


New submission from Asheesh Laroia <asheesh at asheesh.org>:

When reading the bug importer logs, I noticed a bit of exciting insanity:

2013-05-17 01:24:58+0000 [Spider for importing using oh-bugimporters] DEBUG: Redirecting 
(302) to <GET https://bugzilla.mozilla.org/buglist.cgi?quicksearch=show_bug.cgi> from <GET 
https://bugzil.la/show_bug.cgi?...]

Nothing good can come of this redirect (-:

In particular, it indicates that the bug tracker is misconfigured:

* The base_url should be bugzilla.mozilla.org, not bugzil.la in this case.

But moreover, we never should accept cross-domain redirects, but doing such a redirect *indicates* 
that the bug tracker is misconfigured.

----------
messages: 3715
nosy: paulproteus
priority: bug
status: unread
title: oh-bugimporters: Refuse to follow cross-domain redirects (within Bugzilla importer)

__________________________________________
Roundup issue tracker <bugs at openhatch.org>
<https://openhatch.org/bugs/issue857>
__________________________________________


More information about the Devel mailing list