Skip to content

Free-text fields carry no warning against entering sensitive personal data #668

Description

@rubenvdlinde

Planninq's free-text fields and comments carry no warning against entering sensitive personal data, such as a health reason in a task description.

This is a code reading of planninq development at f936e09 and nextcloud-vue development at c8aa858, from the planninq timetabling competitor scan (#665, matrix row plt-free-text-warning).

The competitor

The planninq matrix rates Xedule yes and the other three unknown. Xedule release 7.3 added "AVG-waarschuwing bij vrije invulvelden" (https://support.xedule.nl/hc/nl/articles/35674360498450-AVG-waarschuwing-bij-vrije-invoervelden).

What planninq has

  • Free text in task.description, project.description, projectPhase.description, plannedTimeEntry.description and label.description (lib/Settings/planninq_register.json).
  • Comments in the task sidebar (src/views/TaskDetail.vue:124).
  • A search of src/ and lib/ for privacy|sensitive|gevoelig|persoonsgegevens finds no warning text.

The shared components have none either: nextcloud-vue at c8aa858 mentions personal data only in its BSN validator (src/utils/validators/bsn.js).

How I searched

The two searches above, plus a read of the task detail view.

Live check

Open a task's description field and its comment box, and confirm no hint about personal data appears.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

triageAwaiting triage

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions