[xwiki-users] Everyone can see user's e-mail on myxwiki.org
Hi, I have noticed on my "user page" at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains "truncated e-mail address" (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-... Sent from the XWiki- Users mailing list archive at Nabble.com.
You can enable "Obfuscate Email Addresses" in your wiki administration. On Tue, Dec 3, 2013 at 11:45 PM, xrichard <[email protected]> wrote:
Hi,
I have noticed on my "user page" at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)?
URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username
My account page on other Wiki (like on l10n.xxx) contains "truncated e-mail address" (the end of the email is hidden).
regards,
-- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi, On 4 Dec 2013 at 09:02:02, Thomas Mortagne ([email protected]) wrote: You can enable "Obfuscate Email Addresses" in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)). Thanks -Vincent On Tue, Dec 3, 2013 at 11:45 PM, xrichard <[email protected]> wrote:
Hi, I have noticed on my "user page" at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains "truncated e-mail address" (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
And fixed for xwiki.org too… This behavior change was really not good since it broke existing sites… :( Thanks -Vincent On 4 Dec 2013 at 09:47:54, [email protected] ([email protected]) wrote: Hi, On 4 Dec 2013 at 09:02:02, Thomas Mortagne ([email protected]) wrote: You can enable "Obfuscate Email Addresses" in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)). Thanks -Vincent On Tue, Dec 3, 2013 at 11:45 PM, xrichard <[email protected]> wrote:
Hi, I have noticed on my "user page" at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains "truncated e-mail address" (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hi! +1 vote for making Email Obfuscation turned ON by deafult. Otherwise it causes abovementioned problems :( Среда, 4 декабря 2013, 9:50 +01:00 от "[email protected]" <[email protected]>:
And fixed for xwiki.org too…
This behavior change was really not good since it broke existing sites… :(
Thanks -Vincent
On 4 Dec 2013 at 09:47:54, [email protected] ([email protected]) wrote:
Hi,
On 4 Dec 2013 at 09:02:02, Thomas Mortagne ([email protected]) wrote:
You can enable "Obfuscate Email Addresses" in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)).
Thanks
-Vincent
On Tue, Dec 3, 2013 at 11:45 PM, xrichard < [email protected] > wrote:
Hi, I have noticed on my "user page" at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains "truncated e-mail address" (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-... Sent from the XWiki- Users mailing list archive at Nabble.com. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Kind regards, Dmitry
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards, Dmitry
This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
On 4 Dec 2013 at 10:45:35, Thomas Mortagne ([email protected]) wrote: This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before. Thanks -Vincent On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry
Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example: [email protected] On 12/04/2013 04:45 AM, Thomas Mortagne wrote:
This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2.
On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- || | | |||| || || | |||| ||| | ||| Patrick Masson General Manager, Director & Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: [email protected] <mailto:[email protected]> Ws: www.opensource.org <http://www.opensource.org>
Yes that's the one. On Wed, Dec 4, 2013 at 3:39 PM, Patrick Masson <[email protected]> wrote:
Is this were the setting is...? Administration ? Configuration ? Email
Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example: [email protected]
On 12/04/2013 04:45 AM, Thomas Mortagne wrote:
This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2.
On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- || | | |||| || || | |||| ||| | ||| Patrick Masson General Manager, Director & Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: [email protected] <mailto:[email protected]> Ws: www.opensource.org <http://www.opensource.org>
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
See http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki52#HEmailA... and http://jira.xwiki.org/browse/XWIKI-9224 . Thanks, Marius On Wed, Dec 4, 2013 at 12:03 PM, [email protected] <[email protected]> wrote:
On 4 Dec 2013 at 10:45:35, Thomas Mortagne ([email protected]) wrote:
This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before.
Thanks
-Vincent
On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Turning on obfuscated email through "XWiki" >> "Administer Wiki" >> "Email" >> "Obfuscate Email Addresses" = "YES" does not produce expect result. All emails are still visible in "Wiki Home" >> "User Directory" See: http://osi.xwiki.com/xwiki/bin/view/XWiki/TestOSIuser On 12/05/2013 05:41 AM, Marius Dumitru Florea wrote:
See http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki52#HEmailA... and http://jira.xwiki.org/browse/XWIKI-9224 .
Thanks, Marius
On Wed, Dec 4, 2013 at 12:03 PM, [email protected] <[email protected]> wrote:
On 4 Dec 2013 at 10:45:35, Thomas Mortagne ([email protected]) wrote:
This is true only for a 5.1 -> 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before.
Thanks
-Vincent
On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin <[email protected]> wrote:
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it?
Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne <[email protected]>:
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user).
Kind regards,
Dmitry
users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- || | | |||| || || | |||| ||| | ||| Patrick Masson General Manager, Director & Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: [email protected] <mailto:[email protected]> Ws: www.opensource.org <http://www.opensource.org>
participants (6)
-
Dmitry Bakbardin -
Marius Dumitru Florea -
Patrick Masson -
Thomas Mortagne -
vincent＠massol.net -
xrichard