Prevent stack traces in http 500 response

[Alf Kristian Støyle]

Hi!

Is there a way to make aleph not add the stack trace to the body of 500
error? In production environments it is considered practice to leak this
kind of info, e.g. gives hackers information on what the stack is.

I can of course create a top level middleware to prevent this, just thought
it might be some kind of configuration option.

Best regards,
Alf

[Zach Tellman]

The intended way to do this is via middleware. Make sure you catch all
‘Throwable’ objects so that non-Exceptions don’t leak through.
On Thu, Oct 26, 2017 at 5:17 AM Alf Kristian StÞyle <***@gmail.com>
wrote:

[Alf Kristian Støyle]

Ok, thanks.

Best regards,
Alf

Post by Zach Tellman
The intended way to do this is via middleware. Make sure you catch all
‘Throwable’ objects so that non-Exceptions don’t leak through.