Hello, the following information should complete this bug as a valid SRU
report, to hopefully upload this fix to Lucid.

Solution:

Checkbox revision 782 adds a REFERER header to each request.

TEST CASE:
1- Perform this test case on a freshly-installed 10.04 system.
2- Install netcat (sudo apt-get install netcat)
3- Open a terminal and launch an instance of nc to intercept checkbox traffic 
and log to a file:
   nc -l 8080 >/tmp/dump.dat
3- Open another terminal and launch checkbox-gtk as follows, to make it submit 
to the locally-listening nc:
   checkbox-gtk 
--config='checkbox/plugins/launchpad_exchange/transport_url=http://localhost:8080'
4- Perform a test run (deselect all tests so it takes less time).
5- On the report screen, where it asks for an e-mail address to submit to 
launchpad, put any e-mail address ([email protected] works).
6- Checkbox will seemingly stall in "Exchanging information with server..."
7- Press "Enter" on the terminal where nc is running so checkbox terminates the 
sending process. nc will also exit. Checkbox can be closed at this point.
8- Open the dump.dat file and confirm (at the very beginning) that there's no 
Referer: header in the HTTP request.


Regression potential:
Unless Launchpad decides to outright start rejecting submissions that DO 
contain a referrer, regression potential on this one is basically none.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/550973

Title:
  checkbox should send a referer header when it POSTs data to Launchpad.

To manage notifications about this bug go to:
https://bugs.launchpad.net/checkbox/+bug/550973/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to