The Comment module, which is enabled on the Localize platform, saves hostnames in its comment_field_data table. This is against privacy regulations such as GDPR in the European Union. Those data should be anonymized with the IP Anonymize module.

Comments

FMB created an issue. See original summary.

fmb’s picture

fmb commented
Issue summary: View changes
dydave’s picture

dydave commented
Status: Active » Needs review

The comment module seems to have a setting which disabled logging of the hostname, see:
https://git.drupalcode.org/project/drupal/-/blob/11.3.x/core/modules/com...

  /**
   * Returns the default value for entity hostname base field.
   *
   * @return string
   *   The client host name.
   */
  public static function getDefaultHostname() {
    if (\Drupal::config('comment.settings')->get('log_ip_addresses')) {
      return \Drupal::request()->getClientIP();
    }
    return '';
  }

Currently and by default, this setting is disabled in the project's code base, see:
https://gitlab.com/drupal-infrastructure/sites/localize/-/blob/main/conf...
log_ip_addresses: false

We have checked and when the setting is disabled, the hostname is set to NULL for each comment submission.

Therefore, this should not be an issue with the project.

Felip (@fmb), we will let you update the status of this issue as you see fit, but we would recommend rejecting it for now, since the project should not be logging any IP address from users.

Feel free to let us know if you have any questions or concerns on any aspect of this reply, we would surely be glad to help.
Thanks in advance!

fmb’s picture

fmb commented
Status: Needs review » Fixed

Good to know, thanks @dydave!

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.