https://issues.apache.org/bugzilla/show_bug.cgi?id=53071

--- Comment #4 from Christopher Schultz <ch...@christopherschultz.net> ---
Putting this caveat in the bug and not just on the dev list:

This might end up being a security problem, depending on what information is in
the exception message. Can we make this a non-default option? Many sites (ours
included) attempt to avoid any part of a stack trace (even the message)
leaking-out to users.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to