spring-boot

Commit Graph

Author	SHA1	Message	Date
Scott Frederick	a30740f8d2	Separate server properties for message and errors Prior to this commit, there was a property server.error.include-details that allowed configuration of the message and errors attributes in a server error response. This commit separates the control of the message and errors attributes into two separate properties named server.error.include-message and server.error.include-binding-errors. When the message attribute is excluded from a servlet response, the value is changed from a hard-coded text value to an empty value. Fixes gh-20505	5 years ago
Scott Frederick	70d4994502	Disable exception details on default error views Prior to this commit, default error responses included the message from a handled exception. When the exception was a BindException, the error responses could also include an errors attribute containing the details of the binding failure. These details could leak information about the application. This commit removes the exception message and binding errors detail from error responses by default, and introduces a `server.error.include-details` property that can be used to cause these details to be included in the response. Fixes gh-20505	5 years ago
Madhura Bhave	d9466f5659	Move smoke tests under spring-boot-test See gh-17393	5 years ago

Author

SHA1

Message

Date

Scott Frederick

a30740f8d2

Separate server properties for message and errors

Prior to this commit, there was a property server.error.include-details
that allowed configuration of the message and errors attributes in a
server error response.

This commit separates the control of the message and errors attributes
into two separate properties named server.error.include-message and
server.error.include-binding-errors. When the message attribute is
excluded from a servlet response, the value is changed from a
hard-coded text value to an empty value.

Fixes gh-20505

Scott Frederick

70d4994502

Disable exception details on default error views

Prior to this commit, default error responses included the message
from a handled exception. When the exception was a BindException, the
error responses could also include an errors attribute containing the
details of the binding failure. These details could leak information
about the application.

This commit removes the exception message and binding errors detail
from error responses by default, and introduces a
`server.error.include-details` property that can be used to cause
these details to be included in the response.

Fixes gh-20505

Madhura Bhave

d9466f5659

Move smoke tests under spring-boot-test

See gh-17393

3 Commits (de3dbaf1d59fe485c01616c366a923aadf6bcaf4)