package main

import "fmt"

func init() {
	register(Check{
		Seq:   150,
		ID:    "15",
		Title: "No err.Error() leaked to HTTP clients",
		Run: func(ctx *ScanContext, rep *Reporter) {
			// Check 15: No err.Error() leaked to HTTP clients
			fmt.Println("=== Check 15: No err.Error() leaked to HTTP clients ===")
			var errLeaks []errLeakViolation
			for _, target := range ctx.backendTargets {
				for _, v := range checkErrLeak(target.root) {
					v.file = prefixDisplayPath(target.display, v.file)
					errLeaks = append(errLeaks, v)
				}
			}
			for _, target := range ctx.pluginTargets {
				for _, v := range checkErrLeak(target.root) {
					v.file = prefixDisplayPath(target.display, v.file)
					errLeaks = append(errLeaks, v)
				}
			}
			if len(errLeaks) > 0 {
				fmt.Printf("  FAIL: %d err.Error() leak(s) to HTTP clients:\n", len(errLeaks))
				for _, v := range errLeaks {
					fmt.Printf("    %s:%d %s\n", v.file, v.line, v.snippet)
				}
				fmt.Println("\n  Fix: Log the error with slog.Error() and return a user-friendly message: http.Error(w, \"failed to open repository\", status)")
				rep.Fail()
			} else {
				fmt.Println("  OK: No err.Error() leaked to HTTP clients")
				printPerTargetOKLines(pluginTargetLabels(ctx.pluginTargets))
			}

			fmt.Println()
		},
	})
}