-
Type:
Improvement
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 10.10, 2021
-
Component/s: Rest API
-
Release Notes Summary:The nuxeo conf property "org.nuxeo.rest.exception.message.enabled" is available to hide exception messages at Rest API level
-
Release Notes Description:
-
Tags:
-
Backlog priority:850
-
Sprint:nxplatform #90, nxplatform #91
A client identified the inclusion of complete exception messages in failed requests as a potential security risk and a conflict with their security guidelines.
Rest API calls should not return exception messages OR clients should have the option of suppressing the behavior.
- mentioned in
-
Page Loading...
