Add better error handling for specific URL so it doesn't expose source code

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Unresolved
    • None
    • Component/s: Tomcat
    • None
    • 4
    • 7

      In specific scenario an error containing stack trace is returned from an Atlassian plugin for both web and API requests

      The URL are implemented in Jira naturally for gadget(dashboard) and I modulated a query-string that uri attribute was 1(that was not existed). The result was ABNORMAL(the HTML throws error-stack-log).

      <Jira BASE URL>/plugins/servlet/gadgets/dashboard-diagnostics?uri=1

      Accessing the above URL results in a 500 error, but the error stack trace is fully exposed. This issue seems to be related to Atlassian's error handling:

            Assignee:
            Unassigned
            Reporter:
            Alex O (Inactive)
            Votes:
            3 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: