3 ms·
> http.Error(w, err.Error(), 500) This will send the sql error directly to the client. I don't think it's a good idea because it can leak important information
by rakoo 11y ago
> http.Error(w, err.Error(), 500)
This will send the sql error directly to the client. I don't think it's a good idea because it can leak important information to it; it's better to log this error on the server and send back a generic failure message to the client.
- alexedwards 11y agoYep, thanks. I've updated the examples to use `http.Error(w, http.StatusText(500), 500)` instead.