[ 
https://issues.apache.org/jira/browse/WHIMSY-155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16249719#comment-16249719
 ] 

Shane Curcuru commented on WHIMSY-155:
--------------------------------------

Also happens with any ..../Bogus-end-path

This mostly posts the same environment dump that this does: 
https://whimsy.apache.org/committers/test.cgi

Note that both of these paths should already be restricted to Apache 
committers, so it's already reasonably-trusted people who could trigger this.

Presumably the board agenda tool config is now dumping environment instead of 
using a server-wide 500 error file somehow?  (Most other paths outside /board/ 
still show server-wide 404/500 error pages as expected)

> Whimsy URL snafu reveals SERVER env vars?
> -----------------------------------------
>
>                 Key: WHIMSY-155
>                 URL: https://issues.apache.org/jira/browse/WHIMSY-155
>             Project: Whimsy
>          Issue Type: Bug
>          Components: BoardAgenda
>            Reporter: Chris A. Mattmann
>
> Hey while looking for the test agenda I stumbled across this:
> https://whimsy.apache.org/board/test/agenda/2017-11-15/October-18-2017
> Which reveals a bunch of SERVER env vars I won't repost here. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to