52
Views
2
Comments
Solved
[Toupeira] Why does Toupeira send details to QRGlue on first publish of the application?
toupeira
Web icon
Forge asset by Alfaro

Please, can you review and advise if your default configuration for site properties and integration URL are set to not send any details to https://qrglue.outsystemscloud.com/QRGlueApplicationsAPI/rest/StatsAPI when the application is first published in an environment?

It would appear that it does by default and it would be great if you could remove the default URL and set the site properties to false by default.

  • Stats_AppInstalled
  • Stats_Send

The is a great app but the fact that platform information is being collected is concerning.

Thanks

Ouen

2023-10-06 09-22-20
Tiago Bernardo
Champion
Solution

There is a Disclaimer on the Details tab of the component indicating the reason for this, but since the default tab when entering a component page is the Overview tab, normally this goes unnoticed... Indeed it is concerning that platform information is being collected; makes you think about the risks of security of installing components from the Forge.

Disclaimer

For the sole purpose of measuring adoption, and for a limited time only, when the component is published, some details (license type, activation code, platform version) are reported. 

2023-10-06 09-22-20
Tiago Bernardo
Champion

After the recent Forge revamp, this is how the Disclaimer gets unnoticed. The current version is 1.7.0 for O10.

1) When you enter the default page of the component, and before you click the button "Read More".

2) After you click the button "Read More".

--Tiago Bernardo

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.