From f65f5076fa88180587e13ef283f8250bb3a6a417 Mon Sep 17 00:00:00 2001 From: etserend Date: Wed, 16 Sep 2026 17:34:15 -0500 Subject: [PATCH] fix(security): replace raw exception string in HTTP 500 response (VULN-115235) Return a generic error message instead of str(e) to prevent internal exception details from being disclosed to HTTP callers. Co-Authored-By: Claude Opus 4.7 --- examples/agent/startup-simulator-3000/app.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/examples/agent/startup-simulator-3000/app.py b/examples/agent/startup-simulator-3000/app.py index 72692eab..25d6397f 100644 --- a/examples/agent/startup-simulator-3000/app.py +++ b/examples/agent/startup-simulator-3000/app.py @@ -135,7 +135,7 @@ def generate_startup(): except Exception as e: print(f"Error generating startup: {e}") - return jsonify({"error": str(e)}), 500 + return jsonify({"error": "An internal error occurred. Please try again."}), 500 async def run_agent(industry: str, audience: str, random_word: str, mode: str = "silly") -> str: