Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
Servlets Post 2.3.6
-
None
Description
When the :applyTo operation fails the change-log leaks information about the internal path-structure even when the requesting session does not have access to these paths.
One solution would be to completely omit the ChangeLog (at least when the operation fails), another option would be to make the :sendError behaviour configurable in the POST servlet, so that the error message can be reliably overlaid.
Attachments
Issue Links
- breaks
-
SLING-6703 Sling Post Servlet: Do not hide original exception in AbstractPostResponse.setError
- Closed
- relates to
-
SLING-2156 Provide error handling for POST operations
- Closed