Private branches are shown in the tag cloud @ http://code.launchpad.net

Bug #328900 reported by Joshua Blount
22
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Jonathan Lange

Bug Description

On the recently updated tag cloud shown at http://code.launchpad.net some of the branches are private. This is a problem for users because if they click on these private projects that appear to have a lot of action behind them, they get the screenshot below, which seems to indicate LP is broken in some way.

Tags: lp-code
Revision history for this message
Joshua Blount (jblount) wrote :
Revision history for this message
Diogo Matsubara (matsubara) wrote :

Setting to high as we're leaking information

Changed in launchpad:
importance: Undecided → High
Revision history for this message
Paul Hummer (rockstar) wrote :

I think that this may have been due to LPW work, and possibly related to Jono's work on the tag cloud.

Changed in launchpad-bazaar:
status: New → Triaged
Revision history for this message
Jonathan Lange (jml) wrote :

I think it's more closely tied to the fact that we are now showing things starting with 'L' on the front page!

I'm not 100% convinced that this is a bug, but am happy to change the code.

Revision history for this message
Christian Reis (kiko) wrote :

Isn't this a pretty clear leak of private information?

Revision history for this message
Jonathan Lange (jml) wrote : Re: [Bug 328900] Re: Private branches are shown in the tag cloud @ http://code.launchpad.net

On Sat, Feb 14, 2009 at 6:36 PM, Christian Reis <email address hidden> wrote:
> Isn't this a pretty clear leak of private information?
>

Well, the patch is up and waiting for review anyway.

Changed in launchpad-bazaar:
assignee: nobody → jml
milestone: none → 2.2.2
status: Triaged → In Progress
Revision history for this message
Martin Pool (mbp) wrote :

2009/2/14 Christian Reis <email address hidden>:
> Isn't this a pretty clear leak of private information?

It is at least leaking the number of branches, and the number of recent commits.

For all the examples I could see the project homepage is public
already so showing the project name is not very bad, but it might be
better hidden.

--
Martin <http://launchpad.net/~mbp/>

Revision history for this message
Jonathan Lange (jml) wrote :

Fixed in r7779

Changed in launchpad-bazaar:
status: In Progress → Fix Committed
Jonathan Lange (jml)
Changed in launchpad-bazaar:
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
visibility: private → public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.