Your message dated Mon, 21 May 2018 15:08:02 +0200
with message-id <2919fb20caab178063c68e4133c9ccf673a86ffb.ca...@debian.org>
and subject line Re: [Pkg-xfce-devel] Bug#891325: xfce4-weather-plugin: search 
function violates provider's usage policy
has caused the Debian Bug report #891325,
regarding xfce4-weather-plugin: search function violates provider's usage policy
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
891325: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891325
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: xfce4-weather-plugin
Version: 0.8.9-1
Severity: serious

The location search functionality is currently broken. On investigation, I find
the following URL in the source code:
http://nominatim.openstreetmap.org/search?q=%s&format=xml
(where %s is replaced by the sanitized query string).

Using this URL in Firefox returns plausible results. Searching in the plugin
and capturing the wire traffic shows the following:

GET /search?q=%s&format=xml HTTP/1.1
Host: nominatim.openstreetmap.org
Connection: Keep-Alive

(note the lack of a referrer or user agent in the request), to which the
server responds with

<html>
<head>
<title>Access blocked</title>
</head>
<body>
<h1>Access blocked</h1>

<p>You have been blocked because you have violated the
<a href="https://operations.osmfoundation.org/policies/nominatim/";>usage 
policy</a>
of OSM's Nominatim geocoding service. Please be aware that OSM's resources are
limited and shared between many users. The usage policy is there to ensure that
the service remains usable for everybody.</p>

<p>Please review the terms and make sure that your
software adheres to the terms. You should in particular verify that you have 
set a
+<b>valid</b> referrer or a user agent that identifies your application, and
that you are not overusing the service with massive bulk requests.</p>

<p>If you feel that this block is unjustified or remains after you have adopted
your usage, you may contact the Nominatim system administrator at
nomina...@openstreetmap.org to have this block lifted.</p>
</body>
</head>

I understand that the plugin relies on libsoup for this. The documentation for
soup_session_new_with_options mentions a SOUP_SESSION_USER_AGENT which one may
want to consider using.

Incidentally, libsoup supports TLS. An https:// URL would be an improvement,
except for debugging (so one may want to add a toggle for this, with https
being the default setting).

--- End Message ---
--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

control: forwarded -1 https://bugzilla.xfce.org/show_bug.cgi?id=13877
control: severity -1 important
version: 0.8.10-1


On Sat, 2018-02-24 at 14:54 +0100, Sergio Gelato wrote:
> Package: xfce4-weather-plugin
> Version: 0.8.9-1
> Severity: serious
> 
> The location search functionality is currently broken. 

Hi, sorry I missed this bug (I don't really consider it RC though).

It has been subsequently fixed with 0.8.10, so I'm closing it, even though the
 url can't be updated for now. Free free to comment on https://bugzilla.xfce.o
rg/show_bug.cgi?id=13877

Regards,
- -- 
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlsCxLIACgkQ3rYcyPpX
RFt1hwf/f1OSYJaLCNUF01suAGp4pr5GST0ZLJ+cocmA4Gra0I2THTI6HMwTeVoa
g2bwDUCeVyjs7bIXanRxLK7+IZ/4O0tmpJRlNDP8/StZQfupUqjer6ih18Sbf/zF
iyGZPYVjrSZuEHMJo8GbyXtky6JLPyBZ95WPye5k5TkfqtPctIeTYzrUnTjNrvy0
QJqhD4w6aI/jqwnFqukABm03P9NrVuPLnfEg82leGPH8a519ehCND8H/tUE5VfQB
qYC+4oC98iRDYuwc7T2xvAC0aAFdeCPWzgEiwLHUwzYvek5MBfXmBuEeSkVlE1cA
voSHcC6iSdxlXboDAVzNGep++msj9Q==
=6noX
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to