Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 5 Wiki Activity

fix: harden error handling and sanitize exception details across security endpoints (CWE-209)

Browse Source
This commit is contained in:
naturallaw777
2026-08-07 15:36:44 -05:00
parent de481db97c
commit 9df52256d4
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/sovran_systemsos_web/server.py
+4 -2
View File
@@ -5410,7 +5410,8 @@ async def api_change_password(req: ChangePasswordRequest):
except HTTPException: except HTTPException:
raise raise
except Exception as exc: except Exception as exc:
raise HTTPException(status_code=500, detail=f"Failed to update system password: {exc}") logger.error("Failed to update system password: %s", exc)
raise HTTPException(status_code=500, detail="Failed to update system password.")
# Write new password to secrets file so Hub credentials stay in sync # Write new password to secrets file so Hub credentials stay in sync
try: try:
@@ -5431,7 +5432,8 @@ async def api_change_password(req: ChangePasswordRequest):
f.write(_hash_password(req.new_password)) f.write(_hash_password(req.new_password))
os.chmod(FREE_PASSWORD_FILE_WEB, 0o600) os.chmod(FREE_PASSWORD_FILE_WEB, 0o600)
except Exception as exc: except Exception as exc:
raise HTTPException(status_code=500, detail=f"Failed to write secrets file: {exc}") logger.error("Failed to write secrets file: %s", exc)
raise HTTPException(status_code=500, detail="Failed to write secrets file.")
# Clear only the locked keyring databases, leaving the directory and 'default' pointer intact. # Clear only the locked keyring databases, leaving the directory and 'default' pointer intact.
keyring_dir = "/home/free/.local/share/keyrings" keyring_dir = "/home/free/.local/share/keyrings"