security: sanitize all error messages shown to users

Created centralized userFriendlyError() utility that converts raw
exceptions into clean, user-friendly messages. Strips hostnames,
ports, OS error codes, HTTP status codes, stack traces, and Django
field names. Maps network/timeout/auth/server errors to plain
English messages.

Fixed 16 locations across 10 files:
- home_screen, calendar_screen, learn_more_screen (SnackBar/Text)
- login_screen, desktop_login_screen (SnackBar)
- profile_screen, contribute_screen, search_screen (SnackBar)
- review_form, review_section (inline error text)
- gamification_provider (error field)

Also removed double-wrapped exceptions in ReviewService (rethrow
instead of throw Exception('Failed to...: $e')).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-03-31 07:15:02 +05:30
parent 81872070e4
commit bc12fe70aa
13 changed files with 111 additions and 27 deletions

View File

@@ -1,6 +1,7 @@
// lib/screens/search_screen.dart
import 'dart:ui';
import 'package:flutter/material.dart';
import '../core/utils/error_utils.dart';
// Location packages
import 'package:geolocator/geolocator.dart';
@@ -152,7 +153,7 @@ class _SearchScreenState extends State<SearchScreen> {
if (mounted) Navigator.of(context).pop('Current Location');
} catch (e) {
if (mounted) {
ScaffoldMessenger.of(context).showSnackBar(SnackBar(content: Text('Could not determine location: $e')));
ScaffoldMessenger.of(context).showSnackBar(SnackBar(content: Text(userFriendlyError(e))));
Navigator.of(context).pop('Current Location');
}
} finally {