project license_info field does not limit size

Bug #1076343 reported by Laura Czajkowski
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
High
Unassigned

Bug Description

User can place an unchecked amount of text in the license_info field. The large text can cause timeouts and layout issues. Users need to know the names of the licenses, or a links to the licenses, and no more.

Changed in launchpad:
status: New → Triaged
importance: Undecided → Critical
tags: added: private-projects projects timeout
Revision history for this message
William Grant (wgrant) wrote :

The user-provided license description appears to be 34MB, causing repeated loads to be slow.

tags: removed: private-projects
Revision history for this message
Curtis Hovey (sinzui) wrote :

This has happened before. We want a paragraph listing the license namess or URL to each license. Lp never wanted an actual license. Lets restrict the field to 5/10k, revise the field description again, and purge the offending data from the db.

Revision history for this message
Luc Bruninx (luc2005) wrote :

Does Launchpad downloads the content of URL in the licence form field?

If this is the case, in which file format the licence must be given (linked by the URL)?

It seems to me that the best thing to do would be to simply change the URLs to HTML links and no more.

Revision history for this message
Luc Bruninx (luc2005) wrote :

So I cannot modify the field.

https://launchpad.net/abstrasy/+edit don't work too.

My web browser is freezing when I open this URL.

Revision history for this message
Curtis Hovey (sinzui) wrote :

Launchpad does not download licenses. It does not want licenses. It wants to tell contributors what the terms (because many will not contribute if they believe the terms are unfair) are and allow a Registry Admin to verify if the project qualifies for free hosting.

Your browser is freezing for the same, reason as the front page, that data needs to be loaded. This python script may fix the issue:

#!/usr/bin/python
from launchpadlib.launchpad import Launchpad
lp = Launchpad.login_with(
    'purge-license-info', service_root='https://api.launchpad.net',
    version='devel')
project = lp.projects['abstrasy']
project.license_info = 'URL TO LICENSE'
project.lp_save()

Revision history for this message
Luc Bruninx (luc2005) wrote :

Thank you very much for your help.

Your script has been very useful. I just added the URL of the EUPL on the website of the European Union.

This is the open source license of my project. I add no more information about the license.

Curtis Hovey (sinzui)
Changed in launchpad:
importance: Critical → High
summary: - project overview produce a timed out error
+ project license_info field does not limit size
description: updated
tags: added: tech-debt
removed: timeout
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.