Don't print exception message in HTML

The exception message is potentially influenced by user input and could thus be confusing (e.g. somebody could try to open a file like "Please send a mail to support@foo.com", and then the message would include that string.

It is thus reasonable to not show the exception message by default. Also for the browser view I added an `exit()` at the end, as otherwise the XML exception would be attached.
pull/1342/head
Lukas Reschke 10 years ago
parent f5aafdc897
commit f715b5ea2e
No known key found for this signature in database
GPG Key ID: B9F6980CF6E759B1
  1. 7
      apps/dav/lib/Files/BrowserErrorPagePlugin.php
  2. 5
      apps/dav/templates/exception.php

@ -31,7 +31,6 @@ use Sabre\DAV\Server;
use Sabre\DAV\ServerPlugin;
class BrowserErrorPagePlugin extends ServerPlugin {
/** @var Server */
private $server;
@ -88,8 +87,7 @@ class BrowserErrorPagePlugin extends ServerPlugin {
/**
* @codeCoverageIgnore
* @param \Exception $ex
* @param int $httpCode
* @param \Exception $exception
* @return bool|string
*/
public function generateBody(\Exception $exception) {
@ -109,10 +107,11 @@ class BrowserErrorPagePlugin extends ServerPlugin {
return $content->fetchPage();
}
/*
/**
* @codeCoverageIgnore
*/
public function sendResponse() {
$this->server->sapi->sendResponse($this->server->httpResponse);
exit();
}
}

@ -1,7 +1,5 @@
<?php
/**
*
* @author Thomas Müller <thomas.mueller@tmit.eu>
*
* @license GNU AGPL version 3 or any later version
@ -21,10 +19,11 @@
*
*/
style('core', ['styles', 'header']);
/** @param $_ array */
?>
<span class="error error-wide">
<h2><strong><?php p($_['title']) ?></strong></h2>
<p><?php p($_['message']) ?></p>
<br>
<h2><strong><?php p($l->t('Technical details')) ?></strong></h2>

Loading…
Cancel
Save