fix(api): detail produit 500 HY093 + trace serveur des erreurs #115

Merged
Corentin merged 1 commit from fix/api-product-detail-hy093 into dev 2026-06-29 12:23:34 +02:00
Owner
No description provided.
fix(api): detail produit 500 HY093 + trace serveur des erreurs
All checks were successful
CI / secret-scan (push) Successful in 16s
CI / php-lint (push) Successful in 29s
CI / static-tests (push) Successful in 1m7s
CI / php-lint (pull_request) Successful in 24s
CI / js-tests (pull_request) Successful in 25s
CI / js-tests (push) Successful in 32s
CI / secret-scan (pull_request) Successful in 14s
CI / static-tests (pull_request) Successful in 54s
b1e776394a
GET /api/products/{id} d'une base a variantes renvoyait 500 SQLSTATE[HY093] :
ProductRepository::sizesForProduct reutilisait le placeholder nomme :base, interdit
en prepare native (PDO::ATTR_EMULATE_PREPARES=false). Placeholders distincts
base_self / base_variant (meme valeur). Regression couverte sur vraie base
(CatalogueReadDbTest::testSizesForProductLoadsBaseAndVariantsWithoutBindingError) ;
scan confirme : sizesForProduct etait le seul site avec un placeholder reutilise.

Le front controller logue desormais SYSTEMATIQUEMENT l'exception (stderr),
independamment d'APP_DEBUG : la prod renvoie un message generique au client
(information disclosure) mais l'incident reste diagnosticable cote serveur.
Corentin scheduled this pull request to auto merge when all checks succeed 2026-06-29 12:19:05 +02:00
Sign in to join this conversation.
No reviewers
No labels
auto-merge
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
AcadeNice/corentin_wakdo!115
No description provided.