Error handling and information disclosure
4 guides tagged Error handling and information disclosure, grouped by topic, with the SDLC phase and role each is written for.
- SDLC phases
Application security
3 guidesGuide · Application security
Handle failures without leaking internals or weakening controls
Give callers a useful, bounded response while preserving protected diagnostic evidence and safe application state.
Development · Developers, AppSec engineers
Guide · Application security
Ship without debug modes, verbose errors or exposed files
Turn off debug output, publish an allowlisted build and probe each deployment for exposed files and endpoints.
Development · Developers, Platform engineers and SREs
Guide · Application security
Audit unsafe Rust, FFI boundaries and crate dependencies
Know what the Rust compiler proves and what it leaves to you: review unsafe code for soundness, wrap foreign calls in small safe functions, decide how overflow and panics behave in release builds, gate crates with RustSec, and replace C one boundary at a time.
Development · Developers, AppSec engineers