16 ms·
It's a pattern to prevent information leakage
by shangxiao 10y ago
It's a pattern to prevent information leakage
- Washuu 10y agoI assume to prevent exposing the names of private repositories, correct? For the main(global) search page it would seem reasonable easy to just omit that from the search results.
- stephengillie 10y agoThis way it can't be brute-scraped either.
- danneu 10y agoThat makes sense for endpoints like /admin, but it's more confusing than it's worth for users when the endpoint is otherwise rather public. Well, just see this comment thread. As an example, in this case with the /issues page, redirecting to `/login?redirect-to=/issues` would be more user-friendly since it signals that the page exists but you must authenticate.