Event Handling
Forums:
There are many things you can gleam from errors and they should be handled.
Granted it may not be 100% useful, but it does give out information.
I recently received an error from a site. Minimally this tells me that the site is using Amazon Web Services as their backend.
Kindly enough, AWS even includes a link to the developers guide in the error message.
The timeout in this event was the gateway, they are using cloud front, etc...
Way too much information to the end user.
Not only do you need to handle exceptions in your code, you also have to handle them in the other layers.
Could that request ID possibly be used to spoof?
Granted it may not be 100% useful, but it does give out information.
I recently received an error from a site. Minimally this tells me that the site is using Amazon Web Services as their backend.
Kindly enough, AWS even includes a link to the developers guide in the error message.
The timeout in this event was the gateway, they are using cloud front, etc...
Way too much information to the end user.
Not only do you need to handle exceptions in your code, you also have to handle them in the other layers.
Could that request ID possibly be used to spoof?
504 ERROR The request could not be satisfied. CloudFront attempted to establish a connection with the origin, but either the attempt failed or the origin closed the connection. For more information on how to troubleshoot this error, please refer to the CloudFront documentation (https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/http-504-gateway-timeout.html). Generated by cloudfront (CloudFront) Request ID: nyDONYBsgVNtJC5rAi-tsevKNW9GA8AIA-oC1XJfEwpflMInHnd3lQ==
- Log in to post comments
