omdbapi / OMDb-API

The Open Movie Database Bug Tracking
418 stars 21 forks source link

Internal Server Error with any request including character '<' in any parameter value #262

Open apibugsreporting opened 2 years ago

apibugsreporting commented 2 years ago

As the title says, any request using such character ('<') within any parameter value, e.g.: GET https://omdbapi.com/?s=val<ue

Returns a 500 status code (Internal Server Error) which also shows the stack trace of the exception thrown. Moreover, the error occurs even when not providing an API key. I guess this has something to do with the configuration of the server, more than with the API itself, but the API should correctly process these values, and the stack trace should not be publicly displayed (it is sensitive information).

A test report revealing this issue is available at: http://apitesting.ddns.net/fse2022/restest/target/allure-reports/omdb__r_ft_/#behaviors/b1a8273437954620fa374b796ffaacdd/68a2df1b2b5866af/