Details
-
Improvement
-
Resolution: Unresolved
-
Minor
-
None
-
15.10.10
-
None
-
Unknown
-
Description
When an error occurs XWiki displays a box with the full stack trace and in some cases the actual source code directly to the user. This can be a security issue for some instances.
- Possible improvements:
Add a new setting in the admin panel that lets an administrator choose the error verbosity rendered in the wiki. The setting should have at least 2 modes:
- Detail mode: full stack trace (current behavior)
- Generic mode: in this mode XWiki should only display a generic error and an error ID in the frontend and the actual error should be displayed in the the server logs along the id so it is easier to identify