*/
    void onChunk(String content, boolean done);

    /**
     * Called when an error occurs during processing.
     *
     * @param phase the phase where the error occurred
     * @param error the error message
     */
    void onError(String phase, String error);

    /**
     * Returns a no-op callback implementation.
     *
     * @return a callback that does nothing
     */

    html = get_swagger_ui_html(
        openapi_url="/openapi.json",
        title="Test",
        swagger_ui_parameters={"customKey": "<img src=x onerror=alert(1)>"},
    )
    body = html.body.decode()
    assert "<img src=x onerror=alert(1)>" not in body
    assert "\\u003cimg" in body


def test_normal_init_oauth_still_works():
    html = get_swagger_ui_html(
        openapi_url="/openapi.json",

    }

    @Test
    public void test_render_xss_imgOnerror() {
        String malicious = "<img src=\"x\" onerror=\"alert('XSS')\">";
        String result = markdownRenderer.render(malicious);
        // onerror attribute should be removed
        assertFalse(result.contains("onerror"));
    }

    @Test
    public void test_render_xss_iframeTag() {

     * @param done true if this is the final chunk
     */
    void onChunk(String chunk, boolean done);

    /**
     * Called when an error occurs during streaming.
     *
     * @param error the error that occurred
     */
    default void onError(final Throwable error) {
        // Default implementation does nothing
    }

                            logger.debug("SSE error event sent. phase={}, error={}", phase, errorCode);
                        }
                    } catch (final Exception e) {
                        if (logger.isDebugEnabled()) {
                            logger.debug("Failed to send error event. phase={}, error={}", phase, e.getMessage());
                        }
                    }
                }

        updateUI();
        showStatus('error');
        hideProgressIndicator();
        showErrorBanner(errorMessage);
    }

    /**
     * Show error banner
     */
    function showErrorBanner(message) {
        elements.errorBanner.find('.error-message').text(message);
        elements.errorBanner.removeClass('d-none');
    }

    /**
     * Hide error banner
     */

            logger.warn("[RAG] LLM error during enhanced chat. sessionId={}, errorCode={}, error={}, elapsedTime={}ms",
                    session.getSessionId(), e.getErrorCode(), e.getMessage(), System.currentTimeMillis() - startTime, e);
            callback.onError("llm", e.getErrorCode());
            throw e;
        } catch (final Exception e) {

wrapping it in net.OpError when the underlying read returns EOF....

    CyclicBarrier barrier = new CyclicBarrier(2);
    // we need to make sure the error gets thrown on a different thread.
    ExecutorService service = newSingleThreadExecutor();
    try {
      SequentialExecutor executor = new SequentialExecutor(service);
      Runnable errorTask =
          () -> {
            throw new MyError();
          };
      Runnable barrierTask =
          () -> {

# Usar los códigos de estado antiguos 403 para errores de autenticación { #use-old-403-authentication-error-status-codes }

Antes de FastAPI versión `0.122.0`, cuando las utilidades de seguridad integradas devolvían un error al cliente después de una autenticación fallida, usaban el código de estado HTTP `403 Forbidden`.