root 1208b3bd40 fix(api): drop err.message from 500 response body (CWE-209) ...

Catch-all error handlers in lib/api/errors.js and server.js were
echoing raw err.message to clients. Replace with a fixed generic
message; the full error continues to be logged server-side via pino.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-31 20:45:08 +10:00

1.0 KiB

Raw Blame History

View Raw