746 B
746 B
| id | title | status | priority | created | updated | started | completed | tags | claimed_by | claimed_at | class | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 15 | Replace die('Wrong parameter') with proper 404/error handler | done | medium | 2026-07-17T03:57:28.297533467+02:00 | 2026-07-19T20:20:20.011896223+02:00 | 2026-07-19T20:20:20.013282064+02:00 | 2026-07-19T20:20:20.013282064+02:00 |
|
rain-raven | 2026-07-19T20:20:20.011896223+02:00 | standard |
From framework review (docs/framework_review.md), P1-3. ZAPController::__construct() calls die('Wrong parameter') when an unknown mode is given — no HTTP status, no HTML, and the polling onerror contract expects ERROR_PREFIX HTML. Fix: return a proper 404 response (or brand error page via ZAPError handler). Also consider mode allowlist.