949446 - Source Code Disclosure of every possible project

Status: RESOLVED WONTFIX

(Websites :: other.mozilla.org, defect)

Description

[Shpend K.]

User Agent: Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36

Steps to reproduce:

Bascilly, by going to http://viewvc.svn.mozilla.org/vc/projects/ you can view the source code of every website and project of mozilla. Not sure if this is supposed to be like this , or this is a major information disclosure vulnerability?


Actual results:

Went to http://viewvc.svn.mozilla.org/vc/projects/ and i can see all source code of all projects. No access controls at all.


Expected results:

Don't know, maybe ask for email&password combination

Comment 1

[Curtis Koenig [:curtisk-use curtis.koenig+bzATgmail.com]]]

Mozilla is open sournce, we share everything.

Comment 2

[Shpend K.]

Alright then, i thought so but reported just in case :).

Comment 3

[Buddy Lindsey]

More of it is at https://github.com/mozilla/ if your curious.

Comment 4

[Jesse Ruderman]

More, including Firefox source code, on https://hg.mozilla.org/

And even some still on http://bonsai.mozilla.org/cvsqueryform.cgi !

Comment 5

[Michael Beckwith]

Oh boy! Now I have access to everything!

Comment 6

[Kohei Yoshino]

That's fun, right?

Comment 8

[wolftune]

There should be a reverse version of this ticket posted on all proprietary project listings. The bug is when the source is private for any published software. That's a real problem.

Comment 10

[dan.j.hakimi]

Uh oh -- you know what the software running on your machine does? That's a problem. What if you were allowed to change it? Then the people whose software you were running wouldn't own your computer anymore. Wouldn't that be terrible? Owning your own property?

Comment 11

[dan.j.hakimi]

Uh oh -- you know what the software running on your machine does? That's a problem. What if you were allowed to change it? Then the people whose software you were running wouldn't own your computer anymore. Wouldn't that be terrible? Owning your own property?

Comment 12

[:glob ✱]

in order to prevent further off-topic/advocacy comments, i'm restricting comments on this bug.