[Toupeira] Why does Toupeira send details to QRGlue on first publish of the application?

Forge Component
Published on 2018-03-09 by Carlos Alfaro
6 votes
Published on 2018-03-09 by Carlos Alfaro

Please, can you review and advise if your default configuration for site properties and integration URL are set to not send any details to https://qrglue.outsystemscloud.com/QRGlueApplicationsAPI/rest/StatsAPI when the application is first published in an environment?

It would appear that it does by default and it would be great if you could remove the default URL and set the site properties to false by default.

  • Stats_AppInstalled
  • Stats_Send

The is a great app but the fact that platform information is being collected is concerning.




There is a Disclaimer on the Details tab of the component indicating the reason for this, but since the default tab when entering a component page is the Overview tab, normally this goes unnoticed... Indeed it is concerning that platform information is being collected; makes you think about the risks of security of installing components from the Forge.


For the sole purpose of measuring adoption, and for a limited time only, when the component is published, some details (license type, activation code, platform version) are reported. 


After the recent Forge revamp, this is how the Disclaimer gets unnoticed. The current version is 1.7.0 for O10.

1) When you enter the default page of the component, and before you click the button "Read More".

2) After you click the button "Read More".

--Tiago Bernardo