New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add global configuration option `allowExtendedErrorInfo` #240

Open
rhuss opened this Issue Jan 23, 2016 · 0 comments

Comments

Projects
None yet
1 participant
@rhuss
Owner

rhuss commented Jan 23, 2016

In order to not allow access to internal information like the stacktraces (contained by default when includeStackTrace option is set) or the serialized form of an exception (serializeException set to true, default is false) a global configuration option allowExtendedErrorInfo would avoid this even when these options are provided as query parameters.

See also hawtio/hawtio#2076 for an use case.

@rhuss rhuss added this to the 1.3.3 milestone Jan 23, 2016

rhuss added a commit that referenced this issue Jan 23, 2016

#240: Add configuration option "allowErrorDetails"
If set to `false` no error details (stack trace, serialized exceptions) are included regardless of other options. Default is `true`

@rhuss rhuss modified the milestones: 1.3.3, 1.3.4 Apr 13, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment