avoid sending internal data via Exception messages to untrusted clients

This commit is contained in:
Axel Uhl
2025-01-23 15:16:25 +01:00
parent e4bf410161
commit 90e14ecd1d
4 changed files with 6 additions and 11 deletions
@@ -56,7 +56,7 @@ public class ClearStateServlet extends HttpServlet {
}
response.setStatus(HttpServletResponse.SC_NO_CONTENT);
} catch (Exception exception) {
response.sendError(HttpServletResponse.SC_INTERNAL_SERVER_ERROR, exception.getMessage());
response.sendError(HttpServletResponse.SC_INTERNAL_SERVER_ERROR, "Error trying to clear state. See erver log for details.");
}
return;
}