Skip to content

Security: Placeholder Error Mapping in Request Builders#1466

Closed
tomaioo wants to merge 1 commit into
microsoftgraph:mainfrom
tomaioo:fix/security/placeholder-error-mapping-in-request-bui
Closed

Security: Placeholder Error Mapping in Request Builders#1466
tomaioo wants to merge 1 commit into
microsoftgraph:mainfrom
tomaioo:fix/security/placeholder-error-mapping-in-request-bui

Conversation

@tomaioo
Copy link
Copy Markdown

@tomaioo tomaioo commented May 6, 2026

Summary

Security: Placeholder Error Mapping in Request Builders

Problem

Severity: Medium | File: msgraph/generated/admin/service_announcement/messages/archive/archive_request_builder.py:L47

All request builder classes use 'XXX' as a placeholder in error_mapping dictionaries: error_mapping: dict[str, type[ParsableFactory]] = {'XXX': ODataError}. This placeholder was not replaced during code generation and indicates incomplete error handling for HTTP status codes.

Solution

Replace 'XXX' placeholder with actual HTTP status code mappings (e.g., '4XX', '5XX', or specific codes like '400', '401', '403', '404', '500') to properly handle API error responses.

Changes

  • msgraph/generated/admin/service_announcement/messages/archive/archive_request_builder.py (modified)

All request builder classes use 'XXX' as a placeholder in error_mapping dictionaries: `error_mapping: dict[str, type[ParsableFactory]] = {'XXX': ODataError}`. This placeholder was not replaced during code generation and indicates incomplete error handling for HTTP status codes.

Signed-off-by: tomaioo <203048277+tomaioo@users.noreply.github.com>
@tomaioo tomaioo requested a review from a team as a code owner May 6, 2026 00:06
@gavinbarron
Copy link
Copy Markdown
Member

Thanks for trying to help here @tomaioo

This fix needs to be implemented in kiota which is used to generate these classes.

If I were to merge your PR here it would be overwritten on the next generation run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants