package main

func init() {
	register(Check{
		Seq:   150,
		ID:    "15",
		Title: "No err.Error() leaked to HTTP clients",
		Run: func(ctx *ScanContext, rep *Reporter) {
			var errLeaks []errLeakViolation
			for _, target := range ctx.backendTargets {
				for _, v := range checkErrLeak(target.root) {
					v.file = prefixDisplayPath(target.display, v.file)
					errLeaks = append(errLeaks, v)
				}
			}
			for _, target := range ctx.pluginTargets {
				for _, v := range checkErrLeak(target.root) {
					v.file = prefixDisplayPath(target.display, v.file)
					errLeaks = append(errLeaks, v)
				}
			}
			if len(errLeaks) > 0 {
				rep.Fail("%d err.Error() leak(s) to HTTP clients — log via slog.Error() and return a user-friendly message", len(errLeaks))
				for _, v := range errLeaks {
					rep.Findingf("%s:%d %s", v.file, v.line, v.snippet)
				}
			} else {
				rep.OK("No err.Error() leaked to HTTP clients")
			}
		},
	})
}