Comment 5 for bug 550973

Revision history for this message
Daniel Manrique (roadmr) wrote :

Hello, the following information should complete this bug as a valid SRU report, to hopefully upload this fix to Lucid.

Solution:

Checkbox revision 782 adds a REFERER header to each request.

TEST CASE:
1- Perform this test case on a freshly-installed 10.04 system.
2- Install netcat (sudo apt-get install netcat)
3- Open a terminal and launch an instance of nc to intercept checkbox traffic and log to a file:
   nc -l 8080 >/tmp/dump.dat
3- Open another terminal and launch checkbox-gtk as follows, to make it submit to the locally-listening nc:
   checkbox-gtk --config='checkbox/plugins/launchpad_exchange/transport_url=http://localhost:8080'
4- Perform a test run (deselect all tests so it takes less time).
5- On the report screen, where it asks for an e-mail address to submit to launchpad, put any e-mail address (a@b.com works).
6- Checkbox will seemingly stall in "Exchanging information with server..."
7- Press "Enter" on the terminal where nc is running so checkbox terminates the sending process. nc will also exit. Checkbox can be closed at this point.
8- Open the dump.dat file and confirm (at the very beginning) that there's no Referer: header in the HTTP request.

Regression potential:
Unless Launchpad decides to outright start rejecting submissions that DO contain a referrer, regression potential on this one is basically none.