fix: remove error details from 500 responses in submissions API

[Copilot]

The submissions API was returning error.message in 500 responses, potentially leaking database connection strings, schema details, or internal implementation specifics to clients.

Changes:

• Removed details field from error responses in api/submissions.ts
• Error handling now matches pattern in other API endpoints (apps, preferences, users)
• Detailed errors remain in server logs via console.error()

Before:

return new Response(
  JSON.stringify({
    error: 'Internal server error',
    details: error instanceof Error ? error.message : 'Unknown error'
  }),
  { status: 500, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
);

After:

return new Response(
  JSON.stringify({ error: 'Internal server error' }),
  { status: 500, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
);

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
string-v2	Ready	Preview, Comment	Feb 12, 2026 4:08pm