Last modified: 2013-04-10 06:28:04 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T36379, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 34379 - [upstream] Jenkins should send cookies with secure flag
[upstream] Jenkins should send cookies with secure flag
Status: NEW
Product: Wikimedia
Classification: Unclassified
Continuous integration (Other open bugs)
unspecified
All All
: Low minor (vote)
: ---
Assigned To: Nobody - You can work on this!
: upstream
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-02-13 20:16 UTC by Antoine "hashar" Musso (WMF)
Modified: 2013-04-10 06:28 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Antoine "hashar" Musso (WMF) 2012-02-13 20:16:20 UTC
Jenkins does not flag cookies as secure, thus they can be sent unencrypted!

Upstream issue:
https://issues.jenkins-ci.org/browse/JENKINS-12751
Comment 1 Antoine "hashar" Musso (WMF) 2013-01-22 09:22:46 UTC
No news in upstream bug tracker.
Comment 2 Antoine "hashar" Musso (WMF) 2013-04-09 08:27:37 UTC
Timo please leave the '[upstream] ' prefix in the summary. That let me skip the bug easily when reviewing the bug list :-]
Comment 3 Antoine "hashar" Musso (WMF) 2013-04-09 08:27:55 UTC
setting back to low since I want to check it from time to time (lowest are ignored).
Comment 4 Krinkle 2013-04-10 06:28:04 UTC
(In reply to comment #2)
> Timo please leave the '[upstream] ' prefix in the summary. That let me skip
> the bug easily when reviewing the bug list :-]

Fix whatever query you use to exclude those? (NOT keyword:upstream)

Anyway, I'll leave it. But I'm not going to add it everywhere, this logic doesn't scale and is rather biased.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links