Skip to content

Commit 25c2e15

Browse files
authored
Merge pull request #1 from bdoyal/pixeebot/drip-2024-03-25-codeql-java/stack-trace-exposure
Prevent information leak of stack trace details to HTTP responses (CodeQL)
2 parents 817afc7 + fcc0f5f commit 25c2e15

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎src/main/java/org/owasp/webgoat/container/AjaxAuthenticationEntryPoint.java‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ public AjaxAuthenticationEntryPoint(String loginFormUrl) {
5151
@Override
5252
public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) throws IOException, ServletException {
5353
if (request.getHeader("x-requested-with") != null) {
54-
response.sendError(401, authException.getMessage());
54+
response.sendError(401);
5555
} else {
5656
super.commence(request, response, authException);
5757
}

0 commit comments

Comments
 (0)