On Mon, Mar 12, 2012 at 5:12 PM, Tez <[email protected]> wrote: > In addition to HTTP the Google SVN repository plain viewer is also served > over HTTPS. There exists a bug where https:// URIs to directories missing > the trailing slash are redirected to a HTTP destination rather than a HTTPS > destination. > > For example: > > https://postscriptbarcode.googlecode.com/svn/trunk > > incorrectly redirects to: > > http://postscriptbarcode.googlecode.com/svn/trunk/ > > rather than the proper destination: > > https://postscriptbarcode.googlecode.com/svn/trunk/ > > This makes it trivial to slip out of the secure viewer. >
Would you mind filing a formal defect report<http://code.google.com/p/support/wiki/FAQ#If_I_find_a_problem_with_the_hosting_on_Google_Code,_how_do_I_fi>in our issue tracker? Thanks, -Nathaniel -- You received this message because you are subscribed to the Google Groups "Project Hosting on Google Code" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-code-hosting?hl=en.
