From 9f150de08fc42fe7415b0ff60ed690ca80907950 Mon Sep 17 00:00:00 2001 From: Scott Miller Date: Tue, 5 Jan 2021 15:32:47 -0600 Subject: [PATCH] Fix ip disclosure (#10649) * removing extra information from the returned error, to avoid leaking it to unauthenticated requests * removing extra information from the returned error, to avoid leaking it to unauthenticated requests * Changelog entry for #10516 * Change the error message in a way that is retains the HTTP status code * Change changelog file num * And right back where we started... Co-authored-by: bruj0 --- changelog/10579.txt | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 changelog/10579.txt diff --git a/changelog/10579.txt b/changelog/10579.txt new file mode 100644 index 000000000..718ba3bc6 --- /dev/null +++ b/changelog/10579.txt @@ -0,0 +1,3 @@ +```release-note:bug +core: Avoid disclosing IP addresses in the errors of unauthenticated requests +``` \ No newline at end of file