Skip to content

Allow a whitelist of errors to be shown when showerrors is true#2546

Merged
monkeyiq merged 1 commit intosimplesamlphp:masterfrom
monkeyiq:2025/oct/limited-show-errors-master
Oct 20, 2025
Merged

Allow a whitelist of errors to be shown when showerrors is true#2546
monkeyiq merged 1 commit intosimplesamlphp:masterfrom
monkeyiq:2025/oct/limited-show-errors-master

Conversation

@monkeyiq
Copy link
Copy Markdown
Contributor

If this whitelist is not used then all errors are shown if showerrors is true. You can use this new option to explicitly allow backtraces and descriptions to be shown to the user for only select error events.

If you provide a list of errors to show then anything not on that list will not be shown to the user. The error will be logged etc as normal.

This was raised in
#2513

This is a rebase of #2521 to master

If this whitelist is not used then all errors are shown if showerrors
is true. You can use this new option to explicitly allow backtraces
and descriptions to be shown to the user for only select error events.

If you provide a list of errors to show then anything not on that list
will not be shown to the user. The error will be logged etc as normal.

This was raised in
simplesamlphp#2513
@monkeyiq
Copy link
Copy Markdown
Contributor Author

I have moved #2521 over to master. I think it is useful to have as it explicitly allows the list of which errors will be filtered through to the user. The admin might wish to allow some errors to permeate while others can be kept silent from the user. It also allows for specific errors to be hidden if they are seen to be problematic while leaving the remainder of the system as it as rather than shutting off all errors in a single option.

If people don't want the complexity then they can safely ignore the option and set showerrors=true or showerrors=false and either swing the big axe or not as in 2.4.

@monkeyiq monkeyiq merged commit 71f4f31 into simplesamlphp:master Oct 20, 2025
12 of 18 checks passed
@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Jan 19, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant