We need to not throw back details of general exceptions to the frontend.

DNNCommunity / Dnn.StructuredContent

This is a proof of concept for a structured content solution for DNN Platform (formerly known as DotNetNuke). This should not be used in a production environment. Anything can change at this stage of development.

Other

13 stars 5 forks source link

We need to not throw back details of general exceptions to the frontend. #69

Open valadas opened 2 years ago

valadas commented 2 years ago

Describe the bug

Currently most Web APIs catch Exception and throws the details back in the frontend.

It is best practice to give a more generic message on general exceptions because we don't know what failed and it could expose sensitive information.