mirror of
https://we.phorge.it/source/phorge.git
synced 2024-12-03 04:02:43 +01:00
95cf83f14e
Summary: Fixes T11480. This cleans up the error logs a little by quieting three common errors which are really malformed requests: - The CSRF error happens when bots hit anything which does write checks. - The "wrong cookie domain" errors happen when bots try to use the `security.alternate-file-domain` to browse stuff like `/auth/start/`. - The "no phcid" errors happen when bots try to go through the login flow. All of these are clearly communicated to human users, commonly encountered by bots, and not useful to log. I collapsed the `CSRFException` type into a standard malformed request exception, since nothing catches it and I can't really come up with a reason why anything would ever care. Test Plan: Hit each error through some level of `curl -H ...` and/or fakery. Verified that they showed to users before/after, but no longer log. Hit some other real errors, verified that they log. Reviewers: chad Reviewed By: chad Maniphest Tasks: T11480 Differential Revision: https://secure.phabricator.com/D16402 |
||
|---|---|---|
| .. | ||
| PhabricatorAmazonAuthProvider.php | ||
| PhabricatorAsanaAuthProvider.php | ||
| PhabricatorAuthProvider.php | ||
| PhabricatorBitbucketAuthProvider.php | ||
| PhabricatorDisqusAuthProvider.php | ||
| PhabricatorFacebookAuthProvider.php | ||
| PhabricatorGitHubAuthProvider.php | ||
| PhabricatorGoogleAuthProvider.php | ||
| PhabricatorJIRAAuthProvider.php | ||
| PhabricatorLDAPAuthProvider.php | ||
| PhabricatorOAuth1AuthProvider.php | ||
| PhabricatorOAuth1SecretTemporaryTokenType.php | ||
| PhabricatorOAuth2AuthProvider.php | ||
| PhabricatorOAuthAuthProvider.php | ||
| PhabricatorPasswordAuthProvider.php | ||
| PhabricatorPersonaAuthProvider.php | ||
| PhabricatorPhabricatorAuthProvider.php | ||
| PhabricatorTwitchAuthProvider.php | ||
| PhabricatorTwitterAuthProvider.php | ||
| PhabricatorWordPressAuthProvider.php | ||