ComposeBackEnd Debug mode information leak.

Scott's Avatar

Scott

08 Feb, 2012 01:06 AM

Hi,

Likely an easy fix for this one - I noticed the contents of my communication are being logged in /var/log/system.log with the GPGMail plugin installed. Some sort of debug mode:

Feb 8 11:29:42 Mail[1289]: -[ComposeBackEnd _saveThreadSaveContents:] | ComposeBackEnd+GPGMail.m[79] [DEBUG] Content: WebComposeMessageContents 0x7fb645fc9e80, plainText:

[ content omitted, of course ]

This is true regardless of whether or not the mail is marked as encrypted - but it does NOT log the content of communication when the optional tick-box for "encrypt drafts" is enabled.

Is there an easy toggle to disable this logging of message content / debug mode?

Thanks.

  1. Support Staff 1 Posted by Luke Le on 08 Feb, 2012 06:50 AM

    Luke Le's Avatar

    Hi Scott,

    we're very aware of this issue and it will be fixed
    in the version we should release today.

    I apologize for any problems this may have caused.
    Also it's best to delete all your current /var/log/system.log and
    system.loggz files

  2. Support Staff 2 Posted by Luke Le on 14 Feb, 2012 06:00 AM

    Luke Le's Avatar

    Hi Scott,

    just wanted to let you know that we've just released a fix for this problem.
    You can get it if you activate "Download beta versions" in your Mail.app -> Preferences -> GPGMail and click on Check Now.

    Direct Link to a30 - https://github.com/downloads/GPGTools/GPGMail/GPGMail-2.0a30.dmg

    Closing this for now.
    Feel free to open a new discussion if you find any other problems or have a question :)

  3. Luke Le closed this discussion on 14 Feb, 2012 06:00 AM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac