Description
Is your feature request related to a problem?
It is a security concern when a user input is exposed in error messages. Exposing such information can inadvertently leak sensitive data and does not align with security best practices.
For example if I create an entry with a name that leads to an error, let's say invalid_name
, in the error response we should not print out the name: invalid_name
This PR #3953 resolves the issue for connector_url
being exposed in the create connector endpoint.
What solution would you like?
We need to create a generic sanitization method which can filter out harmful/sensitive information before showing that as output.
What alternatives have you considered?
Manually look at all the places where we are printing out error messages and make sure we are not exposing user input in the error messages.
Do you have any additional context?
Add any other context or screenshots about the feature request here.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status