-
Notifications
You must be signed in to change notification settings - Fork 307
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add option to replace traceback on errors #326
feat: add option to replace traceback on errors #326
Conversation
Showing a traceback can be a security risk in a context such as Voila. (for instance showing paths, usernames or values in the exception message) Similar to what we do at notebook execution time at: voila-dashboards/voila#758 here we also disable the transfer of tracebacks at runtime.
1cd88ff
to
bcac032
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This seems reasonable to me - thank you @maartenbreddels.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Makes sense to me. 👍 Thanks, @maartenbreddels.
@maartenbreddels, would you be able to write a test for this? If not, we should open an issue to remind ourselves to write a test at a later time. |
If you give me some pointers, I could take a look, maybe you know of a few test that would look similar. |
None of the current kernel tests send messages - they only test lifecycle management operations. It would be good to add such a test or two that exercises the channels handler and this change. I've gone ahead and created #330. |
Ok, great, then I prefer we merge this as is. |
…ce_traceback feat: add option to replace traceback on errors
Showing a traceback can be a security risk in a context such as Voila.
(for instance showing paths, usernames or values in the exception message)
Similar to what we do at notebook execution time at:
voila-dashboards/voila#758
here we also disable the transfer of tracebacks at runtime.
cc @SylvainCorlay @mariobuikhuizen