Evref-BL / JRPC / 40692194847

88%

Build Type

push

github

Committed by Gabriel-Darbord

Commit Message

Stop telling clients what failed inside the image

An error answer carried the exception's class and message, the object that
signalled it and the method it came from, by default, on every unhandled
error. debugMode suppressed the debugger, not the disclosure, so a server
reachable by anyone described its own internals to them.

It is now `includesErrorData`, off unless a server asks for it, alongside
debugMode on the processor, the server and the decorator. What is withheld is
only what an unmodelled exception would say about the image: an error this
framework models, such as one that names the resource a client asked for,
still answers with the data it chose to send.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Coverage Stats

36 of 48 new or added lines in 3 files covered. (75.0%)

8 existing lines in 1 file now uncovered.

1060 of 1269 relevant lines covered (83.53%)

0.84 hits per line