[ 
https://issues.apache.org/jira/browse/SLING-2156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Antonio Sanso updated SLING-2156:
---------------------------------

    Attachment: SLING-2156-patch.txt

Attaching new patch with the follow differences:

-  Response.sendError is done  rather than throw a ServletException
- a request parameter (:sendError=true) is used instead of configuration



> Provide error handling for POST operations
> ------------------------------------------
>
>                 Key: SLING-2156
>                 URL: https://issues.apache.org/jira/browse/SLING-2156
>             Project: Sling
>          Issue Type: New Feature
>          Components: Servlets
>            Reporter: Antonio Sanso
>         Attachments: SLING-2156-patch.txt, SLING-2156-patch.txt
>
>
> The error handling mechanism described here [0] doesn't seem to apply also to 
> POST operations.
> If an error occurs while posting a resource to repository (e.g. 
> avax.jcr.nodetype.ConstraintViolationException: no matching property 
> definition found for) the HtmlResponse.html template is rendered.
> This  can also represent a security issue since information as 
> REFERRER/technology stack are shown.
> IMHO this page should be at least configurable (if the mechanism in [0] 
> doesn't suite here).
> [0] http://sling.apache.org/site/errorhandling.html

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to