pmlopes / openfaas-quarkus-native-template

An OpenFAAS template for Quarkus.io serverless native functions
Apache License 2.0
10 stars 12 forks source link

Stack trace in console #6

Open akondasif opened 4 years ago

akondasif commented 4 years ago

Greetings,

We are security researchers and we are looking for insecure coding patterns and configurations in the microservice architecture repositories. In your repository, we have found instances of improper exception handling.

According to CWE, stack traces due to exception handling should not be printed. See https://cwe.mitre.org/

Source: https://github.com/pmlopes/openfaas-quarkus-native-template/blob/master/template/quarkus-native/.mvn/wrapper/MavenWrapperDownloader.java

Fix: https://github.com/pmlopes/openfaas-quarkus-native-template/pull/5

I am interested to know if you agree with the findings. Any feedback is appreciated.