In case of an error the error message often contains sensitive data such as the full path which potentially leads to a full path disclosure. Thus the error message should not directly get displayed to the user and instead be logged. |
||
|---|---|---|
| .. | ||
| avatarcontroller.php | ||