So files served from the same domain can steal content from files served from 
the same domain. We don't care for public information, but this isn't cool for 
private.

One way around this is to serve every file from a unique domain. Changing the 
URL structure from https://launchpadlibrarian.net/123/file.txt to 
https://i123.launchpadlibrarian.net/file.txt will do this, and an Apache 
rewrite rule can be used to redirect old URLs to the new URL.
-- 
https://code.launchpad.net/~lifeless/launchpad/private-librarian/+merge/31020
Your team Launchpad code reviewers is requested to review the proposed merge of 
lp:~lifeless/launchpad/private-librarian into lp:launchpad.

_______________________________________________
Mailing list: https://launchpad.net/~launchpad-reviewers
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~launchpad-reviewers
More help   : https://help.launchpad.net/ListHelp

Reply via email to