RedHat-Middleware-Workshops / dg8-workshop

Source for the Red Hat Data Grid 8.0 workshop content repository
15 stars 22 forks source link

Stack trace in console #20

Closed akondasif closed 4 years ago

akondasif commented 4 years ago

Describe the bug Exposing stack traces in console could be problematic

Greetings,

We are security researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of improper exception handling.

According to CWE, stack traces due to exception handling should not be printed. See https://cwe.mitre.org/

Source: https://github.com/RedHat-Middleware-Workshops/dg8-workshop/blob/master/dg8-quarkus-client-example/.mvn/wrapper/MavenWrapperDownloader.java

Fix: https://github.com/RedHat-Middleware-Workshops/dg8-workshop/pull/19

I am interested to know if you agree with the findings. Any feedback is appreciated.