From addc271a1dfccdb7e7db6dc2323f1cadc870469a Mon Sep 17 00:00:00 2001
From: Aravind Kumar <aravind.kumar@contentstack.com>
Date: Tue, 6 Oct 2026 17:47:17 +0530
Subject: [PATCH 1/2] Updated codeowners

---
 CODEOWNERS | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/CODEOWNERS b/CODEOWNERS
index ac7dad0..d9f2fb3 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1,4 +1,5 @@
 * @contentstack/developer-ecosystem-pr-reviewers
 .github/workflows/ @contentstack/security-admin
 **/.snyk @contentstack/security-admin
-**/CODEOWNERS @contentstack/security-admin
\ No newline at end of file
+**/CODEOWNERS @contentstack/security-admin
+**/.gitguardian.yaml @contentstack/security-admin
\ No newline at end of file

From c9413f31d7154487b6ab6511c0a23c73bada1581 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Mon, 26 Oct 2026 16:27:01 +0530
Subject: [PATCH 2/2] Fix: do not echo exception details in example

Log exception details with error_log, show a generic message and disable display_errors in examples/index.php.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 examples/index.php | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/examples/index.php b/examples/index.php
index 9961fe3..3923e4f 100755
--- a/examples/index.php
+++ b/examples/index.php
@@ -7,7 +7,7 @@
     </body>
 </html>
 <?php
-ini_set('display_errors', 'On');
+ini_set('display_errors', 'Off');
 require_once __DIR__ . '/../src/contentstack.php';
 
 use Contentstack\Contentstack;
@@ -27,7 +27,9 @@
       Utility::debug(($result));
 
 } catch(Exception $e) {
-    echo "Message : ".$e->getMessage(); // returns message -> API -> error_message
-    echo "Code : ".$e->getCode(); // returns number -> API -> error_code
-    echo "Errors : ".print_r($e->getErrors()); // returns array -> API -> errors
+    // Log the details server-side; never echo them to the client.
+    error_log("Message : ".$e->getMessage()); // returns message -> API -> error_message
+    error_log("Code : ".$e->getCode()); // returns number -> API -> error_code
+    error_log("Errors : ".print_r($e->getErrors(), true)); // returns array -> API -> errors
+    echo "The request failed. See the server log for details.";
 }