Security Test: Error type inconsistency¶

Description¶

Default Severity: info

Errors in software can sometimes come in different "flavors" than what a program expects. When your code expects one type of error but gets another, it might not handle it properly, leading to mishandled exceptions or even hidden security issues. Developers often assume consistency in error handling, but if an unexpected error type appears, it can bypass safeguards, potentially revealing sensitive details or opening doors for malicious exploits. Ensuring your error handling covers all possible error types is key to avoiding these kinds of pitfalls.

Configuration¶

Identifier: configuration/error_type_inconsistency

Examples¶

All configuration available:

checks:
  configuration/error_type_inconsistency:
    skip: false # default

Compliance and Standards¶