stephanlensky / hyacinth

A Discord bot to send notifications for marketplace (Craigslist, Facebook) postings based on complex matching rules.

Home Page:https://slensky.com/hyacinth

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Secrets could be leaked by stack traces

stephanlensky opened this issue · comments

If a command throws an exception, a stack trace is sent back to the user to help them understand what went wrong.

There is a possibility that this could be used to leak secrets. Messages should be filtered before sending to Discord to blank out any included secret values.

Stack traces are no longer sent in messages, closing