Bug#590269: create a web-based submission for use with reportbug and possibly everything

"Jean-Michel Vourgère" <[email protected]>
Newsgroups gmane.linux.debian.devel.debbugs
Message-ID <201308201503.28430.jmv_deb__13625.8136517883$1377011187$gmane$org@nirgal.com>
Hello

I'm writing a patch for reportbug, and I believe the cgi might need some minor
tweaks:

If the bugreport is a security problem, reportbug asks whether it is an
undisclosed vulnerability. If the answer is Yes, the report is NOT to be sent
to [email protected] but rather to [email protected].
Right now, the CGI will override the destination and publish the problem on the
BTS, which is probably a Bad idea™.

Additionnaly, there are a few other addresses that would be nice to support:

reportbug -kudos sends mail to:
  _package_ @packages.debian.org

If the security tag is present, reportbug will cc:
 Debian Security Team <[email protected]>
 Debian Testing Security Team <[email protected]>

If the user sends additionnal information, report bug will send to
 Debian Bug Tracking System <[email protected]>
Right now the cgi will post to submit, and it might be catched by the BTS [1]
but it would be nice to support these addresses too.

The bugreport cc: option is only writing X-Debbugs-CC headers, so this is not
an issue.


How bad would it be to support all adresses matching *@*.debian.org in to: and
cc:, regarding spams?

My perl level is close to nil. Can anyone look into that?


[1] http://www.debian.org/Bugs/Developer#subjectscan
signature.asc (application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQIcBAABCAAGBQJSE4VAAAoJEEfSOm5WFkrCgwQP/3zimO8iV8JkTWE+PUvq0ZZy
9VLIod2l1Lg4LpCcW9RHeJRr0dHE9agaqS3gYV7gTcFK/B71w8tyzFXZhNfasFvp
7JxXaeGlri3rPVLAR9y9fg2k0vuqQN1/0lFuTpxvDLPw3gu45uagvBoy5Jpm1eTe
/lkzxJBSNwCwqpKSTam8VZrmPIcdQyW+3GKRcoFAp3+eUDSaqKkeSmE9jCVTfOA+
9tflhGGtmCP3HpNGSlHVXo0/pLtksQds+PjH0m1xKbsa0cHfXQeIeGyB6/NE3uxC
jxJFfCk5w3o9ziOsfKKWCXe4XvlEaaL5itv1NN1HWUb179/ssRB8v+BM7ZeaFXwZ
onpeB8pWSmK5Gi2bXNhWABX6MCZNrwUKRUQPEzwiNk2JTZSwjEUMevIS574vzaIF
YyhhNqvFUMH5dbRrZnUHwLmneasiKd9CYySpp25TxYO2qiJoA701SrsAhb9lt6NN
HWZRuURVAAKCzv8xobKbD4DbEAroZ7l0uGYaCoD24U2rtT8Vwf6T2CHuL1SNJdWb
TuBnGu0Rri09KEqmw3O0DrevFlv7+3PFPQovH9rpSzJNiEHfhokMKFA4125Kyihe
QwSMdKj7NKYCpLiF+LNCb+r0rqb83WFTwXYMM2M/yTBrgpkWhF0FYq30zMbK9TFg
Aov+8+zhYf2diWvefKqM
=86B4
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.