Debian Bug report logs - #606239
custom 404 to hide info and be nice for user

Package: www.debian.org; Maintainer for www.debian.org is Debian WWW Team <debian-www@lists.debian.org>;

Reported by: Stéphane Blondon <stephane.blondon@gmail.com>

Date: Tue, 7 Dec 2010 18:09:02 UTC

Severity: wishlist

Tags: confirmed

Done: Martin Zobel-Helas <zobel@ftbfs.de>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian WWW Team <debian-www@lists.debian.org>:
Bug#606239; Package www.debian.org. (Tue, 07 Dec 2010 18:09:05 GMT) Full text and rfc822 format available.

Acknowledgement sent to Stéphane Blondon <stephane.blondon@gmail.com>:
New Bug report received and forwarded. Copy sent to Debian WWW Team <debian-www@lists.debian.org>. (Tue, 07 Dec 2010 18:09:05 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Stéphane Blondon <stephane.blondon@gmail.com>
To: submit@bugs.debian.org
Subject: custom 404 to hide info and be nice for user
Date: Tue, 7 Dec 2010 19:08:10 +0100
[Message part 1 (text/plain, inline)]
Package: www.debian.org

The 404 error page displayed if an URL doesn't match a ressource is
the default one from Apache. There are 2 problems:
- the details of the configuration are public (currently Apache/2.2.9,
etc.). Hiding them would be lightly better (but the gain is not huge
since there are other ways to get them).
- the page is not beautiful for a classical user.

Using a custom page can fix these two goals. The page provided is an
example based on the home page so the style will be consistent with
the website and could reuse other templates.
It would be good if the page could support:
- i18n
- display the erroneous path.
(However a static page is better than the current page.)

Without those features, modifying .htaccess to include something like
ErrorDocument 404 /404.html
would be enough.



-- 
Stéphane
[404.html (text/html, attachment)]

Severity set to 'wishlist' from 'normal' Request was from Simon Paillard <spaillard@debian.org> to control@bugs.debian.org. (Tue, 07 Dec 2010 19:18:03 GMT) Full text and rfc822 format available.

Information forwarded to debian-bugs-dist@lists.debian.org, Debian WWW Team <debian-www@lists.debian.org>:
Bug#606239; Package www.debian.org. (Wed, 08 Dec 2010 07:03:08 GMT) Full text and rfc822 format available.

Acknowledgement sent to Alexander Reichle-Schmehl <tolimar@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian WWW Team <debian-www@lists.debian.org>. (Wed, 08 Dec 2010 07:03:08 GMT) Full text and rfc822 format available.

Message #12 received at 606239@bugs.debian.org (full text, mbox):

From: Alexander Reichle-Schmehl <tolimar@debian.org>
To: 606239@bugs.debian.org
Subject: Re: Bug#606239: custom 404 to hide info and be nice for user
Date: Wed, 08 Dec 2010 08:02:49 +0100
Hi!

Am 07.12.2010 19:08, schrieb Stéphane Blondon:

> - the details of the configuration are public (currently Apache/2.2.9,
> etc.). Hiding them would be lightly better (but the gain is not huge
> since there are other ways to get them).

That's a completely different topic.  Even if you have a custom 404
file, nothing prevents someone from running "curl -I
http://www.debian.org/" or similar to still access these informations.

However, I can see the other arguments for a custom 404 page.


Best regards,
  Alexander




Added tag(s) confirmed. Request was from Martin Zobel-Helas <zobel@debian.org> to control@bugs.debian.org. (Sat, 18 Dec 2010 23:12:04 GMT) Full text and rfc822 format available.

Reply sent to Martin Zobel-Helas <zobel@ftbfs.de>:
You have taken responsibility. (Sun, 06 Feb 2011 13:33:09 GMT) Full text and rfc822 format available.

Notification sent to Stéphane Blondon <stephane.blondon@gmail.com>:
Bug acknowledged by developer. (Sun, 06 Feb 2011 13:33:09 GMT) Full text and rfc822 format available.

Message #19 received at 606239-done@bugs.debian.org (full text, mbox):

From: Martin Zobel-Helas <zobel@ftbfs.de>
To: 606239-done@bugs.debian.org
Subject: Fixed with website relaunch
Date: Sun, 6 Feb 2011 14:24:34 +0100
Hi,                                                                                                                                                                                                             
                                                                                                                                                                                                                
we now have custom 404 error pages.                                                                                                                                                                             
                                                                                                                                                                                                                
Cheers,                                                                                                                                                                                                         
Martin                                                                                                                                                                                                          
-- 
 Martin Zobel-Helas <zobel@debian.org>  | Debian System Administrator
 Debian & GNU/Linux Developer           |           Debian Listmaster
 Public key http://zobel.ftbfs.de/5d64f870.asc   -   KeyID: 5D64 F870
 GPG Fingerprint:  5DB3 1301 375A A50F 07E7  302F 493E FB8E 5D64 F870





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 07 Mar 2011 08:48:07 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Apr 20 00:52:19 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.