> http.Error(w, err.Error(), 500) This will send the sql error directly to the c...

rakoo on June 18, 2015 | parent | context | favorite | on: Practical Persistence in Go: SQL Databases

> http.Error(w, err.Error(), 500)

This will send the sql error directly to the client. I don't think it's a good idea because it can leak important information to it; it's better to log this error on the server and send back a generic failure message to the client.

alexedwards on June 23, 2015 [–]

Yep, thanks. I've updated the examples to use `http.Error(w, http.StatusText(500), 500)` instead.