Information Exposure via Errors

Detects raw error stacks or generic exception details being directly returned in HTTP responses.

zakirkun 6a9f5e4 2 files · 1.3 KB Updated

File contents

Information Exposure via Errors

Overview

Detects raw error stacks or generic exception details being directly returned in HTTP responses.

Remediation

Catch exceptions and return generic (e.g. 500 Internal Server Error) responses in production. Log the actual stack trace securely on the backend.

zakirkun/ice-tea/tree/main/skills/api/information-exposure commit 6a9f5e4d15

Frequently asked questions

npx skillmds@latest add zakirkun/information-exposure-via-errors