Skip to content

[Feature]: CLI --verbose exposes full stack traces #209

@Splatcrafter

Description

@Splatcrafter

AI REVIEWED

Module: cli
Files: All commands
Severity: Low

Problem / Motivation

--verbose enables e.printStackTrace(System.err), exposing internal implementation details and paths. While acceptable for a local CLI tool, this should be documented as a security consideration if the CLI is wrapped in a service.

Proposed Solution

Consider a --debug flag separate from --verbose:

  • --verbose: detailed user-facing messages
  • --debug: full stack traces and internal state (for developers only)

Document that --debug output should not be exposed to untrusted users.

Metadata

Metadata

Assignees

No one assigned

    Labels

    documentationImprovements or additions to documentation

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions