You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A lot of the endpoints will return the full error object as a last-ditch effort to return some intelligent error information on an unexpected error. Code like this:
On full node endpoints like the one above, when the full node is down, the error message will expose the full node password and other RPC info.
This isn't a big threat for rest.bitcoin.com, because we run full nodes that have no wallets and hold no funds. But it's bad practice and should be fixed.
The text was updated successfully, but these errors were encountered:
A lot of the endpoints will return the full error object as a last-ditch effort to return some intelligent error information on an unexpected error. Code like this:
rest.bitcoin.com/src/routes/v2/rawtransactions.ts
Lines 435 to 436 in c80b8df
On full node endpoints like the one above, when the full node is down, the error message will expose the full node password and other RPC info.
This isn't a big threat for rest.bitcoin.com, because we run full nodes that have no wallets and hold no funds. But it's bad practice and should be fixed.
The text was updated successfully, but these errors were encountered: