In case of an error the error message often contains sensitive data such as the full path which potentially leads to a full path disclosure. Thus the error message should not directly get displayed to the user and instead be logged. |
||
|---|---|---|
| .. | ||
| avatar | ||
| command | ||
| lostpassword/controller | ||