From ee8707dfde4395b02122f8c6233206d5a1914fe0 Mon Sep 17 00:00:00 2001 From: Tyler Date: Mon, 6 Jul 2026 14:03:52 -0600 Subject: [PATCH 1/2] fix(security): avoid disclosing raw error details in console [ACT-3524] Replace `console.error(error)` with a fully sanitized message in the CommonGenerator catch block to prevent raw error objects and stack traces from being surfaced in browser consoles. Addresses Wiz SAST finding WS-I002-JAVASCRIPT-00027 (CWE-209, CRITICAL). Co-Authored-By: Claude Sonnet 4.6 --- .../components/app/dialog/common-generator/CommonGenerator.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx b/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx index e08ea2ea51..7709bba60c 100644 --- a/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx +++ b/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx @@ -72,7 +72,7 @@ const CommonGenerator = () => { const userMessage = featureConfig[feature].prompt(inputText, localeName); await generateMessage(userMessage, localeName); } catch (error) { - console.error(error); + console.error('An error occurred. Please try again.'); } }; From a2619c950d5f5b29bee95adf19ca2e5e4a1a4444 Mon Sep 17 00:00:00 2001 From: Tyler Date: Mon, 6 Jul 2026 14:11:04 -0600 Subject: [PATCH 2/2] fix(security): use contextual error message in bedrock CommonGenerator [ACT-3524] --- .../components/app/dialog/common-generator/CommonGenerator.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx b/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx index 7709bba60c..e06c4b4968 100644 --- a/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx +++ b/apps/bedrock-content-generator/src/components/app/dialog/common-generator/CommonGenerator.tsx @@ -72,7 +72,7 @@ const CommonGenerator = () => { const userMessage = featureConfig[feature].prompt(inputText, localeName); await generateMessage(userMessage, localeName); } catch (error) { - console.error('An error occurred. Please try again.'); + console.error('Failed to generate content.'); } };