mahara-contributors team mailing list archive

[Aaron Wells <1384497@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

We purposefully chose *not* to display the Mahara minor version number
on the bottom of the page, as part of the general security practice of
not giving out unnecessary information. (That said, we may accidentally
leak it in some places.)

It'd be useful to know the Mahara *major* version, though, when looking
at a site. And since this is easy to detect due to the addition of new
features in each major release, it would not have any security
ramifications.

** Affects: mahara
     Importance: Medium
     Assignee: Aaron Wells (u-aaronw)
         Status: In Progress

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1384497

Title:
  Display the Mahara major version to non-admins

Status in Mahara ePortfolio:
  In Progress

Bug description:
  We purposefully chose *not* to display the Mahara minor version number
  on the bottom of the page, as part of the general security practice of
  not giving out unnecessary information. (That said, we may
  accidentally leak it in some places.)

  It'd be useful to know the Mahara *major* version, though, when
  looking at a site. And since this is easy to detect due to the
  addition of new features in each major release, it would not have any
  security ramifications.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1384497/+subscriptions