#3751 closed (wontfix)
Trac shows traceback on code.djangoproject.com
| Reported by: | Owned by: | Jacob | |
|---|---|---|---|
| Component: | *.djangoproject.com | Version: | dev |
| Severity: | Keywords: | ||
| Cc: | Triage Stage: | Accepted | |
| Has patch: | no | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description
When there is a random error here on code.djangoproject.com traceback is shown. Obviously this is a security issue. Perhaps this can be configured away or a bug should be reported on trac.
Change History (4)
comment:1 by , 19 years ago
| Triage Stage: | Unreviewed → Accepted |
|---|
comment:2 by , 19 years ago
comment:3 by , 19 years ago
| Resolution: | → wontfix |
|---|---|
| Status: | new → closed |
Yeah, I forgot to save the page of the error but I suppose the only sensitive data it contains is the full paths to the files involved (and the code, but that's open anyway and all password etc. are in non-python config files IIRC). So yeah, after thinking a bit more about this I suppose I'll close the ticket.
comment:4 by , 19 years ago
Here's one that I just got:
Traceback (most recent call last):
File "/home/trac/new-djangoproject-trac-test/trac/web/main.py", line 387, in dispatch_request
File "/home/trac/new-djangoproject-trac-test/trac/web/main.py", line 183, in dispatch
File "/home/trac/new-djangoproject-trac-test/trac/perm.py", line 263, in __init__
File "/home/trac/new-djangoproject-trac-test/trac/perm.py", line 227, in get_user_permissions
File "/home/trac/new-djangoproject-trac-test/trac/perm.py", line 112, in get_user_permissions
File "/usr/lib/python2.3/site-packages/pyPgSQL/PgSQL.py", line 3261, in fetchall
return self.__fetchManyRows(self._rows_, _list)
File "/usr/lib/python2.3/site-packages/pyPgSQL/PgSQL.py", line 2838, in __fetchManyRows
_j = self.__fetchOneRow()
File "/usr/lib/python2.3/site-packages/pyPgSQL/PgSQL.py", line 2812, in __fetchOneRow
for _i in range(self.res.nfields):
AttributeError: 'NoneType' object has no attribute 'nfields'
I'm not sure how it's a security issue -- what sort of sensitive information is revealed?