Error Page (/oops) sans Stacktrace

[je...@jeffsigmon.com]

I'd like to suppress the Stacktrace from the Jenkins error page to avoid unnecessarily leaking information. I can think of three ways to do this.

1. Use the suppress-stack-trace-plugin which creates a servlet filter to inject a custom error page
2. Serve a custom error page from a reverse proxy when /oops is requested.
3. Submit PR to allow suppressing the Stacktrace via configuration

Does anyone have any insight that could be helpful to me?

[je...@jeffsigmon.com]

Looks like this was logged as an issue: https://github.com/jenkinsci/jenkins/pull/765

[Oleg Nenashev]

Which issue do you mean? https://issues.jenkins-ci.org/browse/JENKINS-17782 is already marked as "Fixed". If something needs to be done in the core, maybe it deserves a new issue.

пятница, 2 июня 2017 г., 22:20:12 UTC+2 пользователь je...@jeffsigmon.com написал:

[je...@jeffsigmon.com]

Issue was closed with the recommendation to use the suppress-stack-trace plugin. I will proceed with this plugin.