Skip to content

fix(scripted_tool): use Display not Debug format in errors#470

Merged
chaliy merged 2 commits intomainfrom
claude/fix-428-Y2nIj
Mar 2, 2026
Merged

fix(scripted_tool): use Display not Debug format in errors#470
chaliy merged 2 commits intomainfrom
claude/fix-428-Y2nIj

Conversation

@chaliy
Copy link
Contributor

@chaliy chaliy commented Mar 2, 2026

Summary

  • Error responses used {:?} (Debug format) which could leak internal details
  • Changed to e.to_string() (Display format) for consistent, safe messages

Test plan

  • Unit test: test_error_uses_display_not_debug

Closes #428

…ages

Debug format ({:?}) in error responses could leak internal details
like variant names and struct fields. Switched to Display format
for consistent, user-safe error messages.

Closes #428
@chaliy chaliy force-pushed the claude/fix-428-Y2nIj branch from 56fa487 to c1153a1 Compare March 2, 2026 02:31
@chaliy chaliy merged commit a802e63 into main Mar 2, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[L-4] Error messages may leak internal host state

2 participants