Re: Spam in tracker, xmlrpc, bugs.python.org
"John P. Rouillard" <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Ralf: In message <[email protected]>, Ralf Schlatterbeck writes: >We had a spammer today attach a PDF file to a test issue. The spam has been dealt with. >I used to have access to bugs.python.org (where our roundup tracker is >hosted, too) but don't have anymore. I followed the directions I sent you, pinged EWDurbin on irc channel and he applied my pull request this afternoon.. >Otherwise I could have run my spam >removal script that gets rid of even the history entries. I ran the spam removal script and it worked fine once I got the arguments all specified. I wonder if we should set up a purge action to allow roundup admins without cli level access the ability to run spam-remover (or equivalent functionality). >The second best option would have been to set the content-property of >the attached file to the empty string using xmlrpc (we don't have REST >yet on the deployed version). That also didn't work, I'm always getting: > >xmlrpclib.Fault: <Fault 1: "<class 'roundup.exceptions.UsageError'>:Required Header Missing"> > >This error message seems to be related to the X-REQUESTED-WITH header >(which I'm including according to the xmlrpc docs). Verification of the >Origin and Referer headers (which I'm also including) seems to be ok. > >Anybody know: >- Who has access to the deployed roundup tracker these days? >- Why XMLRPC refuses to cooperate? They are running 1.6.0 using gunicorn (wsgi) with 1.6.0 so we are hit with: https://issues.roundup-tracker.org/issue2551023 which explains why xmlrpc refused to cooperate. Ezio says that they have plans to upgrade to 1.6.1 that should have the fix for that bug, so xmlrpc should work in the future. It would be good if you submitted a pull request to get cli access. I am writing up admin docs for the new setup now while it's fresh in my mind. Have a great week. -- -- rouilj John Rouillard =========================================================================== My employers don't acknowledge my existence much less my opinions.