---
id: 15
title: Replace die('Wrong parameter') with proper 404/error handler
status: done
priority: medium
created: 2026-07-17T03:57:28.297533467+02:00
updated: 2026-07-19T20:20:20.011896223+02:00
started: 2026-07-19T20:20:20.013282064+02:00
completed: 2026-07-19T20:20:20.013282064+02:00
tags:
    - framework
claimed_by: rain-raven
claimed_at: 2026-07-19T20:20:20.011896223+02:00
class: standard
---

From framework review (docs/framework_review.md), P1-3. ZAPController::__construct() calls die('Wrong parameter') when an unknown mode is given — no HTTP status, no HTML, and the polling onerror contract expects ERROR_PREFIX HTML. Fix: return a proper 404 response (or brand error page via ZAPError handler). Also consider mode allowlist.