candle-annotator/services/ml/app
Marko Djordjevic b7f9b2e04d security: replace exception details with generic error in ML service HTTP responses
Replace all instances of `detail=str(e)`, `detail=f"...{exc}"`, and similar
patterns that exposed internal exception messages to HTTP clients in
services/ml/app/main.py. All exception details are now logged server-side
only via logger.error(), while clients receive a generic "Internal server error"
message. Fixes 9 handlers across predict, batch predict, pattern detection,
training start, training runs fetch, training run delete, dataset info,
build dataset, and model load endpoints.

Mark task 5.1 as completed in tasks.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-18 11:23:41 +01:00
..
__init__.py feat(ml): add database schema, config parser, and DVC setup 2026-02-15 12:08:53 +01:00
annotation_ingestion.py feat: add Python migration script and successfully test SQLite to PostgreSQL data migration 2026-02-17 14:01:21 +01:00
config.py feat(ml): add database schema, config parser, and DVC setup 2026-02-15 12:08:53 +01:00
data_access.py fix: resolve numpy type conversion issues in ML service data access 2026-02-17 14:10:21 +01:00
db.py security: remove credential SQL comments and add DATABASE_URL fail-fast check 2026-02-18 10:56:49 +01:00
main.py security: replace exception details with generic error in ML service HTTP responses 2026-02-18 11:23:41 +01:00
patterns.py feat: add FastAPI pattern detection endpoints (Section 1) 2026-02-17 18:34:14 +01:00
preprocessing.py fix(ml): add windowed feature flattening for inference parity 2026-02-15 22:07:06 +01:00