Project

General

Profile

Bug #7756

API error message can expose too much internal information

Added by Ohad Levy over 4 years ago. Updated 11 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
API
Target version:
Difficulty:
Triaged:
Bugzilla link:
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

for example, GET /api/v2/hosts/123 returns:


    "message": "Couldn't find Host::Managed with id=123 [WHERE `hosts`.`type` IN ('Host::Managed')]",
    "class": "ActiveRecord::RecordNotFound" 
}

Related issues

Related to Foreman - Feature #4386: implement gem friendly_id to simply find by id, name, label, etcClosed2014-02-19

Associated revisions

Revision 4915f571 (diff)
Added by Joseph Magen over 4 years ago

fixes #7756 - render not_found.json.rabl for API errors rather than expose too much internal information

History

#1 Updated by Ohad Levy over 4 years ago

maybe relates to friendly_id ?

#2 Updated by Dominic Cleal over 4 years ago

  • Related to Feature #4386: implement gem friendly_id to simply find by id, name, label, etc added

#3 Updated by Dominic Cleal over 4 years ago

  • Legacy Backlogs Release (now unused) set to 21

#4 Updated by Joseph Magen over 4 years ago

  • Status changed from New to Assigned
  • Assignee set to Joseph Magen
  • Target version set to 1.7.2

#5 Updated by The Foreman Bot over 4 years ago

  • Status changed from Assigned to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/1812 added
  • Pull request deleted ()

#6 Updated by Joseph Magen over 4 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

Also available in: Atom PDF