GlobaLeaks
GlobaLeaks copied to clipboard
changes for Issue #1799 Ensure privacy of users is respected with exception notifications
Description: Changes to resolve the issue - #1799.
Problem statement: In order to quickly diagnose potential problems in the software when exceptions in clients are generated, they are automatically reported to the backend. The backend server caches these exceptions and sends them to the server administrator via email.
In order to prevent inadvertent information leaks the logs should be run through filters that redact the potential inclusion of: (x marks implemented):
sessions keys email addresses (x) pgp formatted strings uuids (x)
Suggested solution: In state.py before sending the mail (notification) the content of the mail (notification) is filtered for any user sensitive information.
Closing as clientside exception notification has been removed in order to prioritize user privacy.