id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
1904	filenames leak into log files from rename (and other web-API operations that take filenames)	zooko		"I just saw something I didn't want to see in someone else's log file:

{{{
22:29:43.173 [196712]: web: 127.0.0.1 GET /uri/[CENSORED]..?t=rename-form&name=me+just+before+I+shot+JFK&when_done=.&rename=rename 200 1111
}}}

Dammit! Now I know who shot JFK. I didn't want to know that.

This ticket could become more important to https://LeastAuthority.com in the future, as we intend to make it very easy for our customers to opt-in to having their incident report files sent automatically to our log gatherer. I would like to see this ticket fixed ASAP so that in the future our customers will have a fixed version of Tahoe-LAFS installed...

If you like this ticket, you may also like: #562, #563, #685, and #1008."	defect	new	major	undecided	code-frontend-web	1.9.2		privacy logging easy