mirror of
https://github.com/A6-9V/MQL5-Google-Onedrive.git
synced 2026-04-11 02:40:56 +00:00
de3bed10ba
🚨 Severity: MEDIUM 💡 Vulnerability: Information Exposure (CWE-209) - The web dashboard returned raw exception messages to users, potentially leaking internal details (stack traces, file paths, sensitive info). - This violated the principle of "Fail Securely". 🎯 Impact: - Attackers could glean information about the internal file structure or database errors to facilitate further attacks. 🔧 Fix: - Configured `logging` to capture errors securely to stderr (standard practice for containerized apps). - Updated `dashboard()` and `get_cached_markdown` to log the full exception traceback server-side. - Changed user-facing response to a generic "Internal Server Error" (500). ✅ Verification: - Added unit test `test_dashboard_error_handling` in `scripts/test_web_dashboard.py`. - Verified that the test passes: `python scripts/test_web_dashboard.py`. - Confirmed that the response body contains "Internal Server Error" and does NOT contain the mock secret. |
||
|---|---|---|
| .. | ||
| bolt.md | ||
| deploy.yml | ||
| palette.md | ||
| sentinel.md | ||
| task_11566195936388909103.json | ||