Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-8620

[Broker-J] HTTP management plugin can reveal system data or debug information

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Minor
    • Resolution: Implemented
    • qpid-java-broker-9.0.0
    • qpid-java-broker-9.1.0
    • Broker-J
    • None

    Description

      The function writeObjectToResponse() in AbstractServlet.java reveals system data or debug information by calling writeValue(). AbstractServlet, RestServlet and QueryServlet return error details on exceptions. The error details should be logged instead and a generic error message should be return in the HttpServletResponse.

      Attachments

        Activity

          People

            Unassigned Unassigned
            daniel.kirilyuk Daniil Kirilyuk
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: