Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-57692

On error at /rest/ stack-trace is publicly visible

    XMLWordPrintable

Details

    Description

      Summary

      On Confluence server 6.12.2 requesting wrong REST URL /rest/cql/contenttypes?category=test we will see full stack-trace.

      The same we can see at https://confluence.atlassian.com/rest/cql/contenttypes?category=test

      On production, a regular user should not see the stack-trace when an error happens.

      Steps to Reproduce

      1. Go to an incorrect REST URL

      Expected Results

      An error message without stack-trace

      Actual Results

      An error message with stack-trace

      <status>
      <status-code>500</status-code>
      <message>Unrecognised type category : test</message>
      <stack-trace>
      com.atlassian.confluence.api.service.exceptions.BadRequestException: Unrecognised type category : test at com.atlassian.confluence.plugins.cql.rest.CQLMetaDataResource.contentTypes(CQLMetaDataResource.java:73) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498)
      ...
      

      Attachments

        Issue Links

          Activity

            People

              6ce45665ee6c Anoop Singh
              64ef84c363e8 Gatis Tomsons
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: