The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Disable Stack/trace methods

Prabhu
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
October 17, 2016

How to configure Jira handle all errors and must not display any debug information or verbose messages thus revealing sensitive parameters?

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

Post a new question

1 vote
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
October 17, 2016

You don't.  It's designed, like all good systems, to tell you what is going wrong.

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
January 11, 2017

No.  That's a vast oversimplification, and not helpful at all.

You absolutely should upgrade if you want to reduce the problem.  In Atlassian applications (like most others) stack traces only go to users when the application is not coded to catch them properly and present something nicer.  Upgrading will reduce the frequency of that, as more areas catch and handle them.

Also, stack traces that users see don't contain debug information that reveals sensitive information.

 

Steve Bachinsky
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
November 21, 2019

Proper evaluation of what data constitutes "sensitive information" is complex, and likely to become more so in the future.  Having the stack trace is helpful in a development and testing environment, but not in a production environment where the primary users will only be scared or disappointed.

There are environments where it is necessary to manage all data that is disclosed by an application, and the ability to minimize diagnostic logging data helps with that process.  Please consider adding a configuration knob to disable the logging of stack trace and other data that is not useful in a production environment.

Like Cheryl_Fogle likes this