search

w3c / Unicorn

Unicorn - W3C's Unified Validator
https://validator.w3.org/unicorn/
Other
128 stars 59 forks source link

Unicorn submitter's e-mail address revealed in public changelog #120

Closed vivienlacourba closed 8 years ago

vivienlacourba commented 8 years ago

Reported by ptomasek on 10 Aug 2010 09:51 UTC When a translator submits a translation of Unicorn via the web interface (e.g. http://validator.w3.org/unicorn/translations?ucn_lang=cs), the provided e-mail address is then made public on W3C's web page. Spammers skim the e-mail address from the web page and abuse the translator.

The following places show translator's e-mail address:

  1. Comment in the properties file (#Submitted by Name ), which is revealed by http://code.w3.org/unicorn/changeset and http://code.w3.org/unicorn/browser
  2. List of changes at https://dvcs.w3.org/hg/unicorn (3rd column shows Submitted by Name )

The Unicorn's translation web interface should also note that the e-mail address provided will be made public. There is no privacy statement available.

vivienlacourba commented 8 years ago

Comment by tgambet on 7 Sep 2010 17:53 UTC This issue has been fixed a few weeks ago. Since then a translator's email address is not published anymore. This does not apply however to translator submissions prior to this fix. We are sorry for any inconvenience.