ministryofjustice / analytics-platform-shiny-server

Analytical Platform Shiny Server • This repository is defined and managed in Terraform
https://user-guide.analytical-platform.service.justice.gov.uk
GNU Affero General Public License v3.0
22 stars 7 forks source link

ANPL-1294 - Set option to sanitize error messages #26

Closed rossjones closed 1 year ago

rossjones commented 1 year ago

Currently when shiny apps generate an error, they will send verbose output to the browser, often containing source code and other potentially sensitive information.

According to the documentation at https://shiny.rstudio.com/articles/sanitize-errors.html#:~:text=To%20sanitize%20errors%20everywhere%20in,in%20the%20next%20section)%3A this PR will globally set an option to make RShiny sanitize errors sent to the browser by sending a generic error page. Errors/Stacks will still be logged to the server.

Fixes https://dsdmoj.atlassian.net/browse/ANPL-1294