Skip to content

NIFI-2339 Removed some outputs which could cause errors to reveal unauthorized data#726

Closed
joewitt wants to merge 1 commit intoapache:masterfrom
joewitt:NIFI-2339
Closed

NIFI-2339 Removed some outputs which could cause errors to reveal unauthorized data#726
joewitt wants to merge 1 commit intoapache:masterfrom
joewitt:NIFI-2339

Conversation

@joewitt
Copy link
Contributor

@joewitt joewitt commented Jul 26, 2016

No description provided.

@mcgilman
Copy link
Contributor

Reviewing...

@mcgilman
Copy link
Contributor

@joewitt I'm still seeing a bunch of details in error messages coming back to the client. Specifically what I'm seeing right now, it looks like StandardProcessGroup is using the toString of it's encapsulated components when generating exception message. We should ensure these toString's don't include those details.

You should be able to see examples of some of these by issuing requests that are invalid. Like deleting a component that has an incoming connection, deleting a group in an invalid state (when data is enqueued in an encapsulated connection), etc.

@joewitt joewitt closed this Aug 1, 2016
@joewitt joewitt deleted the NIFI-2339 branch August 1, 2016 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants