You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We should only send error codes to the client and mask the internal error stack inside the DB.
NB: however, we should still send helpful error messages from db like: Exception occurred while writing to database Error: Strings Should Be in single quotes(Eg 'str') in query $.name="Alice" AND $.Age=50 . But this specific error may be generated from coco query parser written by us and not my SQL itself.
Will MySQL returns any such error messages??
The text was updated successfully, but these errors were encountered:
Currently, coco db sends the error stack directly from lib MySQL to client, exposing internal error details to the client. This is a security risk.
in lib MySQL , some errors are passed through via stack: https://github.com/aicore/libmysql/blob/main/src/utils/db.js#L1048
The above error gets propagated to the client in coco db https://github.com/aicore/cocodb/blob/main/src/api/update.js#L71
We should only send error codes to the client and mask the internal error stack inside the DB.
The text was updated successfully, but these errors were encountered: