orhtej2@eviltoast.org to Programmer Humor@programming.devEnglish · 4 days agoREST my ass 💩eviltoast.orgimagemessage-square106fedilinkarrow-up1787arrow-down15
arrow-up1782arrow-down1imageREST my ass 💩eviltoast.orgorhtej2@eviltoast.org to Programmer Humor@programming.devEnglish · 4 days agomessage-square106fedilink
minus-squaredouglasg14b@lemmy.worldlinkfedilinkarrow-up2arrow-down3·3 days agoCounter argument is that error codes and problem details can be used by attackers to reverse engineer and find exploitable parts of a system. Within reason anyways
minus-squareFeathercrown@lemmy.worldlinkfedilinkEnglisharrow-up8·3 days agoSo can a 200 response with an error description
minus-squarebrian@programming.devlinkfedilinkarrow-up2·2 days agoyeah, ofc it should only be a curated set of errors where the consumer can do something about it. unknown errors should just be opaque 500s
Counter argument is that error codes and problem details can be used by attackers to reverse engineer and find exploitable parts of a system.
Within reason anyways
So can a 200 response with an error description
yeah, ofc it should only be a curated set of errors where the consumer can do something about it. unknown errors should just be opaque 500s