Github user ottobackwards commented on a diff in the pull request: https://github.com/apache/metron/pull/779#discussion_r142477613 --- Diff: metron-interface/metron-rest/src/main/java/org/apache/metron/rest/controller/RestExceptionHandler.java --- @@ -35,7 +36,7 @@ @ResponseBody ResponseEntity<?> handleControllerException(HttpServletRequest request, Throwable ex) { HttpStatus status = getStatus(request); - return new ResponseEntity<>(new RestError(status.value(), ex.getMessage(), getFullMessage(ex)), status); + return new ResponseEntity<>(new RestError(status.value(), ex.getMessage(), ExceptionUtils.getStackTrace(ex)), status); --- End diff -- https://software-security.sans.org/blog/2010/08/11/security-misconfigurations-java-webxml-files
---