Skip to content

Database/Table/Row not found errors echo back text from URL #2359

@simonw

Description

@simonw

This was raised in Discord. The returned error message is escaped, so this isn't an XSS error, but it could still be used to create a confusing error message like so:

Database not found: we are facing a heavy traffic, please visit our following website www.attacker.com to learn more

Metadata

Metadata

Assignees

No one assigned

    Labels

    minorMinor bugs (not high priority)security

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions