Not a software issue but buzilla web interface. would it be possible to hide email adresses of posters (at least until logged in) as is done on gnome bugzilla. I have already started getting asian homosexual porn ads on the address I exclusively use here. "Reporter" field could show reporter's login name rather than full emails that will doubtless get trawled at some stage. At least some form of human readable fogging should be used rather than a clear text email that can be parsed and singles out with a simple regex. Hope that is easy to implement. regards
Not sure you got this one Nick, so i add you in CC
I don't know that that's possible. If you want to google around to see what others have done and post your findings here, that would be appreciated. Agreed that we shouldn't be plastering email addresses all over...
eg http://bugzilla.gnome.org/show_bug.cgi?id=327733 as I noted above gnome bugzilla (seems to be the same software) shows user name not email. Once logged in as a user you get to see emails. This is presumably enought stop most robot trawling. I image you are close enough to some of the peeps at gnome to ask how they achieve that with the software. Thanks for taking this seriously. With over 200 spams per day I know I do. ;)
Ok, it should only show email addresses on bug pages if you're logged in. I didn't look anywhere else. Nick, you'll need to modify your copy of the template. There are two places: 1. For the comment list, it's in bug/comment.html.tmpl at around line 113. 2. For the email address displayed over by the reporter's name, it's in bug/edit.html.tmpl, around line 290. Take a look at /var/www/bugzilla.xfce.org/templates/en/default/ to see what I did. (Yeah, I know, not supposed to edit the default, but I don't care.) We also should probably figure out what to do with the CC listbox, and maybe blank out the "Assigned To:" email, as well as blanking out the "Reassign bug to" text area, since it's kinda stupid anyway (why would I want to try to reassign the bug to the person it's already assigned to?). The CC listbox is tough, because if someone selects names while logged out (assuming we display names while logged out, emails when logged in), then tries to commit, and is prompted for a login, then logs in, the edit will fail with an error because the "remove from CC" handler expects to get email addresses, not names. Maybe just blank out the CC listbox entirely when not logged in, and replace it with the text "Please <link>log in</link> to view the CC list" or something. There might be other places in bugzilla where there are emails shown; I don't really know.
>> Maybe just blank out the CC listbox entirely when not logged in, makes sense. Again look at the gnome bug link I posted . They have been doing this a while and seem to have adressed most of these issues. visiter just gets the full text with posters login name and a log-in box, no CC or other ancilliary stuff. Only bit that does not look tight is the 'assigned to' contact is shown as email. Probably could be a user name too but I guess you fellas' addresses are already on a hundred mail archives and S.E. databases so they're blown anyway.
Ok, thanks for assigning me pollux. I'll fix this in the new templates tomorrow.
nick, thanks for acting on this promptly. seems the assigned to address and CC box still show emails to guest users (and robots). dont know if that was intentional or just more difficult to fix. taking gnome bugzilla as a model, CCs are not shown to guests, just the basic thread of posts. best regards.
All of this should be fixed now.