Skip to content

[Code Quality] Add a sanitization function to sanitize response #3954

Open
@rithin-pullela-aws

Description

@rithin-pullela-aws

Is your feature request related to a problem?
It is a security concern when a user input is exposed in error messages. Exposing such information can inadvertently leak sensitive data and does not align with security best practices.

For example if I create an entry with a name that leads to an error, let's say invalid_name, in the error response we should not print out the name: invalid_name

This PR #3953 resolves the issue for connector_url being exposed in the create connector endpoint.

What solution would you like?
We need to create a generic sanitization method which can filter out harmful/sensitive information before showing that as output.

What alternatives have you considered?
Manually look at all the places where we are printing out error messages and make sure we are not exposing user input in the error messages.

Do you have any additional context?
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Labels

enhancementNew feature or request

Type

No type

Projects

Status

On-deck

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions