bzexport documentation recommends the user to send their bugzilla password over HTTP instead of HTTPS

RESOLVED FIXED

Status

Developer Services
Mercurial: bzexport
RESOLVED FIXED
6 years ago
4 years ago

People

(Reporter: briansmith, Unassigned)

Tracking

Details

See http://hg.mozilla.org/users/tmielczarek_mozilla.com/bzexport/file/a8ebbe6e3ddc/README:

    # URL to the Bugzilla server to use. The default is
    # https://bugzilla.mozilla.org.
    bugzilla = http://bugzilla.example.com/

    # URL to the BzAPI server to use. The default is
    # https://api-dev.bugzilla.mozilla.org/latest/
    api_server = http://bzapi.example.com/latest/

I recommend that this be replaced with:

    # URL to the Bugzilla server to use. The default is
    # bugzilla = https://bugzilla.mozilla.org.

    # URL to the BzAPI server to use. The default is
    # api_server = https://api-dev.bugzilla.mozilla.org/latest/

to avoid peole revealing their passwords via absentminded copy/paste.
Feel free to just push a change to it.
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
(Assignee)

Updated

4 years ago
Product: Other Applications → Developer Services
You need to log in before you can comment on or make changes to this bug.