How to handle fs.stat error on a file?

[expressjs]

How to handle fs.stat error on a file?

[dougwilson]

Yea, I believe there were some issues opened up about this in the past but no PRs ever materialized. I would except it to do the same thing that the Apache HTTPD index view does in this case, which I assume is either hide it or display it without additional metadata.

[dougwilson]

And also agree that all the three views should behave in the same way.

[coolaj86]

I don't know how Apache handles it, so how about we just hide it for now (most secure) and circle back around to it if there's a complaint.

Once we get #74 taken care of I'll come back around to this and update the PR.

[dougwilson]

We have time now to do it right :) waiting until later is unnecessarily churn. I can look at apache httpd and report back to see what it does and then we can decide how to love forward 👍

Bringing up security means it is even more imparitive to validate our implementation against one that has been reviewed many times, or alternatively we can see if a security researcher can take a look at our design here 👍