-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Open
Labels
aspect: securityAnything related to preventing vulnerabilitiesAnything related to preventing vulnerabilitiescomponent: servermeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp teamtype: improvementImproves an existing feature or existing codeImproves an existing feature or existing code
Description
There are a couple of places where we currently send stack traces back to clients in error cases:
- unhandled HTTP errors
- websocket method errors
We should avoid that as it allows 3rd parties to not only learn about our system (they also can do so from our repo), but in theory also about certain runtime configurations that we want to keep with ourselves. As we have no advantage of having those stack traces sent to clients, we can just disable those.
Metadata
Metadata
Assignees
Labels
aspect: securityAnything related to preventing vulnerabilitiesAnything related to preventing vulnerabilitiescomponent: servermeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp teamtype: improvementImproves an existing feature or existing codeImproves an existing feature or existing code
Type
Projects
Status
No status