Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-24723

Add admin settings to control error detail exposure in the frontend

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Unresolved
    • Minor
    • None
    • 15.10.10
    • Rendering
    • None
    • Unknown

    Description

      When an error occurs XWiki displays a box with the full stack trace and in some cases the actual source code directly to the user. This can be a security issue for some instances.

      1. Possible improvements:
        Add a new setting in the admin panel that lets an administrator choose the error verbosity rendered in the wiki. The setting should have at least 2 modes:
      • Detail mode: full stack trace (current behavior)
      • Generic mode: in this mode XWiki should only display a generic error and an error ID in the frontend and the actual error should be displayed in the the server logs along the id so it is easier to identify

      Attachments

        Activity

          People

            Farcasut Farcasi Alexandru-Vicentiu
            Farcasut Farcasi Alexandru-Vicentiu
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated: