GlobaLeaks icon indicating copy to clipboard operation
GlobaLeaks copied to clipboard

changes for Issue #1799 Ensure privacy of users is respected with exception notifications

Open sunilpateliit opened this issue 3 years ago • 0 comments

Description: Changes to resolve the issue - #1799.

Problem statement: In order to quickly diagnose potential problems in the software when exceptions in clients are generated, they are automatically reported to the backend. The backend server caches these exceptions and sends them to the server administrator via email.

In order to prevent inadvertent information leaks the logs should be run through filters that redact the potential inclusion of: (x marks implemented):

sessions keys email addresses (x) pgp formatted strings uuids (x)

Suggested solution: In state.py before sending the mail (notification) the content of the mail (notification) is filtered for any user sensitive information.

sunilpateliit avatar Apr 02 '21 13:04 sunilpateliit

Closing as clientside exception notification has been removed in order to prioritize user privacy.

evilaliv3 avatar Sep 19 '22 16:09 evilaliv3