Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error stack is being sent to the client. We only need error codes #81

Open
Tracked by #138
abose opened this issue Feb 28, 2023 · 0 comments
Open
Tracked by #138

Error stack is being sent to the client. We only need error codes #81

abose opened this issue Feb 28, 2023 · 0 comments
Labels
bug Something isn't working Security Security issues

Comments

@abose
Copy link
Member

abose commented Feb 28, 2023

Currently, coco db sends the error stack directly from lib MySQL to client, exposing internal error details to the client. This is a security risk.

NB: however, we should still send helpful error messages from db like: Exception occurred while writing to database Error: Strings Should Be in single quotes(Eg 'str') in query $.name="Alice" AND $.Age=50 . But this specific error may be generated from coco query parser written by us and not my SQL itself.
Will MySQL returns any such error messages??

@abose abose added the bug Something isn't working label Feb 28, 2023
@abose abose added the Security Security issues label Feb 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Security Security issues
Projects
None yet
Development

No branches or pull requests

1 participant