City-of-Bloomington/open311-mobile — Issue #70: Strip API key from error messages
Author: inghamn
Created: 2011-12-30 14:55:17+00:00
State: open

In trying to set a new "Report To" to our testing server I stumbled across what might be a problem.
I misspelled the URL and it reported back that the URL was incorrect and it included the API_KEY. This was
great for debugging purposes but it has security implications since that API key is meant to be secret.

This is how we can determine where the requests are coming from and its used to shut down requests from a
particular vendor if they are causing problems.

note: I noticed that this error will appear even if the URL is correct and you happen to be out of cell range.