Don't publish mbox_sha1sum in FOAF by default.

We say the email is private data, so reasonably we shouldn't reveal it
indirectly through a hash sum: http://xmlns.com/foaf/spec/#term_mbox_sha1sum
This commit is contained in:
Mikael Nordfeldth 2016-02-19 00:10:05 +01:00
parent a838c90951
commit afbdcf8938
2 changed files with 5 additions and 1 deletions

View File

@ -90,7 +90,7 @@ class FoafAction extends ManagedAction
// Would be nice to tell if they were a Person or not (e.g. a #person usertag?) // Would be nice to tell if they were a Person or not (e.g. a #person usertag?)
$this->elementStart('Agent', array('rdf:about' => $this->user->getUri())); $this->elementStart('Agent', array('rdf:about' => $this->user->getUri()));
if ($this->user->email) { if (common_config('foaf', 'mbox_sha1sum') && $this->user->email) {
$this->element('mbox_sha1sum', null, sha1('mailto:' . $this->user->email)); $this->element('mbox_sha1sum', null, sha1('mailto:' . $this->user->email));
} }
if ($this->profile->fullname) { if ($this->profile->fullname) {

View File

@ -142,6 +142,10 @@ $default =
'path' => $_path . '/avatar/', 'path' => $_path . '/avatar/',
'ssl' => null, 'ssl' => null,
'maxsize' => 300), 'maxsize' => 300),
'foaf' =>
array(
'mbox_sha1sum' => false,
),
'public' => 'public' =>
array('localonly' => false, array('localonly' => false,
'blacklist' => array(), 'blacklist' => array(),