[horde] horde discloses login names

Michael J Rubinsky mrubinsk at horde.org
Tue May 5 21:35:35 UTC 2015


Quoting A. Schulze <sca at andreasschulze.de>:

> Erling Preben Hansen:
>
>> neither
>> https://horde.andreasschulze.de
>> https://andreasschultse.de/horde
>>
>> gives anyting but, an error page.
>
> first: fixed for ipv4 connections, too. sorry!
> second: it's another host where /horde is just invalid

Ok, so I see the screenshots but I'm not sure what you are showing  
that is incorrect. Showing the username is intentional where you show  
them. In some cases we might be able to use the user's configured full  
name, if available, though this would depend on the configured  
preference backend.

-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5869 bytes
Desc: S/MIME Signature
URL: <http://lists.horde.org/archives/horde/attachments/20150505/2f25c7e1/attachment.bin>


More information about the horde mailing list