Debian Bug report logs - #680071
RFP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: Michael Stapelberg <stapelberg@debian.org>

Date: Tue, 3 Jul 2012 11:21:01 UTC

Severity: wishlist

Done: Michael Stapelberg <stapelberg@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, debian-devel@lists.debian.org, debian-perl@lists.debian.org, wnpp@debian.org:
Bug#680071; Package wnpp. (Tue, 03 Jul 2012 11:21:04 GMT) Full text and rfc822 format available.

Acknowledgement sent to Michael Stapelberg <stapelberg@debian.org>:
New Bug report received and forwarded. Copy sent to debian-devel@lists.debian.org, debian-perl@lists.debian.org, wnpp@debian.org. (Tue, 03 Jul 2012 11:21:07 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Michael Stapelberg <stapelberg@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: ITP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)
Date: Tue, 03 Jul 2012 13:10:10 +0200
Package: wnpp
Owner: Michael Stapelberg <stapelberg@debian.org>
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org,debian-perl@lists.debian.org

* Package name    : libplack-middleware-csrfblock-perl
  Version         : 0.03
  Upstream Author : Rintaro Ishizaki <rintaro@cpan.org>
* URL             : http://search.cpan.org/dist/Plack-Middleware-CSRFBlock/
* License         : Artistic or GPL-1+
  Programming Lang: Perl
  Description     : Plack middleware to block CSRF (cross-site request forgery)

This middleware blocks CSRF. You can use this middleware without any
modifications to your application, in most cases.

When the application response content-type is "text/html" or
"application/xhtml+xml", this middleware inserts a hidden input tag that
contains a token string into all POST-forms found in the response body.

For every POST requests, this middleware ensures that the input parameters
contain the collect token parameter. If not found, the middleware throws an
HTTP error 403 (Forbidden) and the forged request does not even reach your
application.




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Michael Stapelberg <stapelberg@debian.org>:
Bug#680071; Package wnpp. (Sat, 17 Aug 2013 07:10:27 GMT) Full text and rfc822 format available.

Acknowledgement sent to Lucas Nussbaum <lucas@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Michael Stapelberg <stapelberg@debian.org>. (Sat, 17 Aug 2013 07:10:27 GMT) Full text and rfc822 format available.

Message #10 received at 680071@bugs.debian.org (full text, mbox):

From: Lucas Nussbaum <lucas@debian.org>
To: 680071@bugs.debian.org
Cc: control@bugs.debian.org
Subject: libplack-middleware-csrfblock-perl: changing back from ITP to RFP
Date: Sat, 17 Aug 2013 09:06:07 +0200
retitle 680071 RFP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)
noowner 680071
tag 680071 - pending
thanks

Hi,

A long time ago, you expressed interest in packaging libplack-middleware-csrfblock-perl. Unfortunately,
it seems that it did not happen. In Debian, we try not to keep ITP bugs open
for a too long time, as it might cause other prospective maintainers to
refrain from packaging the software.

This is an automatic email to change the status of libplack-middleware-csrfblock-perl back from ITP
(Intent to Package) to RFP (Request for Package), because this bug hasn't seen
any activity during the last 12 months.

If you are still interested in packaging libplack-middleware-csrfblock-perl, please send a mail to
<control@bugs.debian.org> with:

 retitle 680071 ITP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)
 owner 680071 !
 thanks

It is also a good idea to document your progress on this ITP from time to
time, by mailing <680071@bugs.debian.org>.  If you need guidance on how to
package this software, please reply to this email, and/or contact the
debian-mentors@lists.debian.org mailing list.

Thank you for your interest in Debian,
-- 
Lucas, for the QA team <debian-qa@lists.debian.org>



Changed Bug title to 'RFP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)' from 'ITP: libplack-middleware-csrfblock-perl -- Plack middleware to block CSRF (cross-site request forgery)' Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Sat, 17 Aug 2013 07:11:13 GMT) Full text and rfc822 format available.

Removed annotation that Bug was owned by Michael Stapelberg <stapelberg@debian.org>. Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Sat, 17 Aug 2013 07:11:14 GMT) Full text and rfc822 format available.

Reply sent to Michael Stapelberg <stapelberg@debian.org>:
You have taken responsibility. (Sat, 17 Aug 2013 08:09:05 GMT) Full text and rfc822 format available.

Notification sent to Michael Stapelberg <stapelberg@debian.org>:
Bug acknowledged by developer. (Sat, 17 Aug 2013 08:09:05 GMT) Full text and rfc822 format available.

Message #19 received at 680071-done@bugs.debian.org (full text, mbox):

From: Michael Stapelberg <stapelberg@debian.org>
To: Lucas Nussbaum <lucas@debian.org>, 680071-done@bugs.debian.org
Subject: Re: Bug#680071: libplack-middleware-csrfblock-perl: changing back from ITP to RFP
Date: Sat, 17 Aug 2013 10:05:43 +0200
Hi Lucas,

thanks for the automatic mail, I didn’t realize this was still open. As
stated on pkg-perl already, this package is no longer of any interest
because the project that needed it has died in the meantime.

Closing the bug therefore to decrease the amount of open bugs.

-- 
Best regards,
Michael



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 15 Sep 2013 07:33:13 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Apr 20 19:48:53 2014; Machine Name: beach.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.