Details
-
Improvement
-
Resolution: Unresolved
-
Major
-
None
-
5.1
-
None
-
Unknown
-
Description
hi,
we have an xwiki for publci documentation running. Since some month there is an company that does security scans for us called whitehat. They give us informations about xss and so on. The found some Vulnerability Class
Information Leakage, all exceptions will be display to all public users.
Example:
If found no setting that help me to prevent viewing this exception to public users.
It would be a better solution to tell the user that there was an error and display an reference code to the user. So that the public user can send this reference code to the admin and the admin can take a look into the logs / database or wherever the exeption is saved.