CatalystCode / project-fortis

Repository for all parts of the Fortis architecture
https://aka.ms/fortis-story
MIT License
29 stars 17 forks source link

Hide Cassandra error details #22

Closed c-w closed 6 years ago

c-w commented 6 years ago

According to @anthturner it's not good practice to expose detailed error messages from the database to clients as this makes it easier for an attacker to figure out potential attack vectors.

This pull request masks the Cassandra error messages in favor of more generic ones that don't risk leaking sensitive information.

See https://github.com/CatalystCode/project-fortis-pipeline/issues/222