-
Notifications
You must be signed in to change notification settings - Fork 3
[Feature]: CLI --verbose exposes full stack traces #209
Copy link
Copy link
Open
Labels
documentationImprovements or additions to documentationImprovements or additions to documentation
Milestone
Description
AI REVIEWED
Module: cli
Files: All commands
Severity: Low
Problem / Motivation
--verbose enables e.printStackTrace(System.err), exposing internal implementation details and paths. While acceptable for a local CLI tool, this should be documented as a security consideration if the CLI is wrapped in a service.
Proposed Solution
Consider a --debug flag separate from --verbose:
--verbose: detailed user-facing messages--debug: full stack traces and internal state (for developers only)
Document that --debug output should not be exposed to untrusted users.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
documentationImprovements or additions to documentationImprovements or additions to documentation