Problem/Motivation

I noticed traffic in my logs to the url https://mysite/print/printmail/printmail/ so I started poking around at it. I notice some strange behavior that does not adversely affect my site but thought it might be worth looking at since I don't think it is an intended result. If you go to anysiteusingprint.org/print/printmail/printmail, you get a screen of what looks like junk, at least to the browser/human eye (I tested this on several different sites). If you add /[anything] to the end of that, the "response" you get appears to be static per URL, which kind of makes it seem like it's returning what might be real data of some kind. I have attached a screenshot of one such result. I just wanted to put it out here in case there actually is some kind of security implication to this. I don't know enough to say.

Proposed resolution

I am just redirecting any calls to /print/printmail/ to my 404 in my htaccess

Remaining tasks

Someone with a better idea of what is going on should take a look and see if there is a security implication, and maybe it would be worth patching the module just to send these requests to a 404

CommentFileSizeAuthor
printmail.png182.69 KBjeramy
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jeramy created an issue. See original summary.

jeramy’s picture

jeramy’s picture

Version: 7.x-2.x-dev » 7.x-2.0