gsadmin/meet
1
0
Fork 0
mirror of https://github.com/suitenumerique/meet.git synced 2026-09-03 06:08:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

🔒️(backend) avoid information exposure through exception messages

Browse Source 
Sanitize error handling to prevent leaking internal details when
invalid or malicious requests are sent to the API.

Return generic error responses to reduce the risk of information
disclosure during probing attempts.
This commit is contained in:
lebaudantoine
2026-03-13 16:32:56 +01:00
committed by aleb_the_flash
parent 73bcb9d598
commit dcb788b57b
4 changed files with 7 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/backend/core/tests/recording/test_api_recordings_storage_hook.py
+2 -2
View File
@@ -95,7 +95,7 @@ def test_save_recording_parsing_error(recording_settings, mock_get_parser, clien
)
assert response.status_code == 403
assert response.json() == {"detail": "Invalid request data: Error message"}
assert response.json() == {"detail": "Invalid request data."}
def test_save_recording_bucket_error(recording_settings, mock_get_parser, client):
@@ -112,7 +112,7 @@ def test_save_recording_bucket_error(recording_settings, mock_get_parser, client
)
assert response.status_code == 403
assert response.json() == {"detail": "Invalid bucket specified"}
assert response.json() == {"detail": "Invalid bucket specified."}
def test_save_recording_filetype_error(recording_settings, mock_get_parser):