fix(security): avoid disclosing raw error details in ai-content-generator RewriteGenerator [ACT-3523]

[Tyler (tylerwashington888)]

Note

This PR was opened by the Codex agent on behalf of Tyler Washington.

Summary

Remediates a CRITICAL Wiz SAST finding (CWE-209) in the ai-content-generator app. A raw error object was passed directly to console.error(), which can disclose internal error details and stack traces.

References

• ACT Ticket: https://contentful.atlassian.net/browse/ACT-3523
• Wiz Issue: https://app.wiz.io/p/production/issues#~(issue~'632d4724-783f-4891-8984-6b92d67a4463')
• Rule: WS-I002-JAVASCRIPT-00027 — Disclosure of Error Details and Stack Traces
• CWE: CWE-209

Confidence Score

96 / 100 (HIGH)

Factor	Score
Wiz remediation guidance specific and actionable	28/30
Flagged code pattern unambiguous	25/25
Fix is localised	20/20
Rule is known with defined fix pattern	15/15
File drift since Wiz scan	8/10

Wiz Remediation Guidance

Replace console.error(error) with a sanitized message to prevent exposure of raw error details or stack traces to logs that may be observable externally.

// BEFORE
} catch (error) {
  console.error(error);
}

// AFTER
} catch (error) {
  console.error('An error occurred. Please try again.');
}

Change

File: apps/ai-content-generator/src/components/app/dialog/rewrite-generator/RewriteGenerator.tsx
Line changed: 91

Before:

    } catch (error) {
      console.error(error);
    }

After:

    } catch (error) {
      console.error('An error occurred. Please try again.');
    }

The raw error object (which may contain stack traces, internal paths, or sensitive runtime details) is no longer forwarded to the console. Only a fixed, non-disclosing string is logged.

Validity Assessment

VALID — The flagged pattern (console.error(error)) was confirmed at line 91 in the catch block spanning lines 90–92. The file has not drifted from the Wiz scan (confidence 8/10 on drift). No other lines were touched.

Test Plan

• Verify the ai-content-generator app builds cleanly: npm run build in apps/ai-content-generator
• Confirm that error handling behaviour is unchanged (the catch block still executes; only the log message is sanitized)
• Check that no other console.error(error) calls exist in this file that would be missed

[Tyler (tylerwashington888)]

Superseded by consolidated PR #11057.