18316431390

Committed 07 Oct 2025 02:41PM UTC coverage: 91.345% (-0.003%) from 91.348%

Build # 18316431390

Build Type

push

github

Committed by

web-flow

Commit Message

fix: Information exposure through a stack trace (#10737)

Fix for
[https://github.com/Unleash/unleash/security/code-scanning/81](https://github.com/Unleash/unleash/security/code-scanning/81)

To prevent information exposure through stack traces, ensure that the
HTTP response sent to clients contains only sanitized, generic error
information, such as a status code and a simple message. Internal
details (including stack traces, error types, or internal error codes)
should not be sent to the client. These can be safely logged on the
server for debugging.

**The fix:**  
- Do not return the entire `finalError` object as JSON to the client, as
it may include fields like `stack` or `internalMessage`.
- Instead, return only a subset of fields that are safe to expose to the
user, in this case just `message` .
- Log the full error and any debugging details using the server-side
logger **as currently done**.


---
_Suggested fixes powered by Copilot Autofix. Review carefully before
merging._

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Coverage Stats

7212 of 7265 branches covered (99.27%)

68604 of 75104 relevant lines covered (91.35%)

435.39 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

70.59

/src/lib/error/pattern-error.ts

Build SHA Not Found

The commit SHA "fab5dc87254fb5d07d902e9df63cdd5468c94f11" was not found in your repository, so the file cannot be loaded. This may be because you posted from a local development environment, or your CI created an ephemeral commit.

Unleash / unleash / 18316431390

Source File Press 'n' to go to next uncovered line, 'b' for previous

Build SHA Not Found

Source File
Press 'n' to go to next uncovered line, 'b' for previous