luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

Fix ip disclosure (#10649) 

* removing extra information from the returned error, to avoid leaking it to unauthenticated requests

* removing extra information from the returned error, to avoid leaking it to unauthenticated requests

* Changelog entry for #10516

* Change the error message in a way that is retains the HTTP status code

* Change changelog file num

* And right back where we started...

Co-authored-by: bruj0 <ramakandra@gmail.com>
This commit is contained in:
Scott Miller 2021-01-05 15:32:47 -06:00 committed by GitHub
parent fd8250adf9
commit 9f150de08f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
changelog/10579.txt Normal file
View File

@ -0,0 +1,3 @@
```release-note:bug
core: Avoid disclosing IP addresses in the errors of unauthenticated requests
```