📝 Update docs about re-raising validation errors, do not include string as is to not leak information (#14487)

This commit is contained in:
Sebastián Ramírez
2025-12-10 04:56:50 -08:00
committed by GitHub
parent 4a98a66778
commit cd9d093f60
3 changed files with 19 additions and 37 deletions

View File

@@ -12,8 +12,11 @@ async def http_exception_handler(request, exc):
@app.exception_handler(RequestValidationError)
async def validation_exception_handler(request, exc):
return PlainTextResponse(str(exc), status_code=400)
async def validation_exception_handler(request, exc: RequestValidationError):
message = "Validation errors:"
for error in exc.errors():
message += f"\nField: {error['loc']}, Error: {error['msg']}"
return PlainTextResponse(message, status_code=400)
@app.get("/items/{item_id}")