Stacktrace when visiting a URL with weird characters

dan · 1 Oct 2020, 14:04

Putting in a URL like https://fusionauth.whatever/api/jwt/issue?application_id={} actually shows a Tomcat error page with a full stack trace. Is there a way to disable this or to at least remove the stack trace from the error messge?

dan · 1 Oct 2020, 14:09

In 1.19.5, we handle most of these cases by configuring tomcat to allow certain characters to be unescaped in the URL.

So an upgrade is the most straightforward way to handle this.

If you are proxying FusionAuth (behind something like nginx) you could also capture and hide any 500 errors: https://stackoverflow.com/questions/8715064/nginx-not-serving-my-error-page/8715597#8715597.