helpers/ErrorHandler.php is documented in README.md (~line 363) as "Global error/exception handler", but it's only actually invoked from api/get_template.php. The other 32 api/*.php endpoints each hand-roll their own try/catch + ini_set('display_errors', ...) instead, producing inconsistent JSON error shapes across the API surface (ErrorHandler's response shape differs from the ad-hoc {success:false,error:...} pattern used elsewhere).
This reads as an incomplete rollout rather than an intentional design choice.
Fix: Either wire ErrorHandler::init() into all API endpoints for a consistent error contract, or update the README to accurately describe it as used in one specific endpoint rather than "global".
**Severity:** Medium
`helpers/ErrorHandler.php` is documented in README.md (~line 363) as "Global error/exception handler", but it's only actually invoked from `api/get_template.php`. The other 32 `api/*.php` endpoints each hand-roll their own try/catch + `ini_set('display_errors', ...)` instead, producing inconsistent JSON error shapes across the API surface (`ErrorHandler`'s response shape differs from the ad-hoc `{success:false,error:...}` pattern used elsewhere).
This reads as an incomplete rollout rather than an intentional design choice.
**Fix:** Either wire `ErrorHandler::init()` into all API endpoints for a consistent error contract, or update the README to accurately describe it as used in one specific endpoint rather than "global".
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Severity: Medium
helpers/ErrorHandler.phpis documented in README.md (~line 363) as "Global error/exception handler", but it's only actually invoked fromapi/get_template.php. The other 32api/*.phpendpoints each hand-roll their own try/catch +ini_set('display_errors', ...)instead, producing inconsistent JSON error shapes across the API surface (ErrorHandler's response shape differs from the ad-hoc{success:false,error:...}pattern used elsewhere).This reads as an incomplete rollout rather than an intentional design choice.
Fix: Either wire
ErrorHandler::init()into all API endpoints for a consistent error contract, or update the README to accurately describe it as used in one specific endpoint rather than "global".