🔒 fix: Sanitize exception message in MCP

DevaOnBreaches · DevaOnBreaches · commit 6c0cf5b5ce91 · 2025-12-29T11:11:00.000+05:30
diff --git a/main.py b/main.py
@@ -299,10 +299,11 @@ async def mcp_post_handler(fastapi_request: Request):
                     },
                 }
             except Exception as e:
+                print(f"MCP list_breaches error: {e}")
                 return {
                     "jsonrpc": "2.0",
                     "id": request_body.get("id"),
-                    "error": {"code": -32603, "message": f"Internal error: {str(e)}"},
+                    "error": {"code": -32603, "message": "Internal error: Failed to list breaches"},
                 }
 
     # Default response for unsupported methods

Original file line number	Diff line number	Diff line change
`@@ -299,10 +299,11 @@ async def mcp_post_handler(fastapi_request: Request):`
`299`	`299`	`},`
`300`	`300`	`}`
`301`	`301`	`except Exception as e:`
	`302`	`+ print(f"MCP list_breaches error: {e}")`
`302`	`303`	`return {`
`303`	`304`	`"jsonrpc": "2.0",`
`304`	`305`	`"id": request_body.get("id"),`
`305`		`- "error": {"code": -32603, "message": f"Internal error: {str(e)}"},`
	`306`	`+ "error": {"code": -32603, "message": "Internal error: Failed to list breaches"},`
`306`	`307`	`}`
`307`	`308`
`308`	`309`	`# Default response for unsupported methods`