igalic opened a new issue #498: 404 on private list link should prompt login
URL: https://github.com/apache/incubator-ponymail/issues/498
 
 
   when clicking on a link that leads to a private list's email, Pony mail 
shows a 404
   
   now, i don't know if it's a breach of data disclosure, but it could also 
prompt for a login — especially, if a session only expired, rather than never 
existed.
   
   alternatively, the login form could be integrated into the site's base 
template, and so, show up everywhere.
   
   though that might require to rethink the design of the login: e.g.: how to 
choose between different authentication providers.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to