Internal calls expose exception information which might contain some sensitive information. The method name was taken from the request path and called on the ErrorPage instance without validation, which might have led to an insecure situation if a method was added to the ErrorPage class without us realizing that it would be exposed through internal calls.
Internal calls expose exception information which might contain some sensitive information. The method name was taken from the request path and called on the
ErrorPage
instance without validation, which might have led to an insecure situation if a method was added to theErrorPage
class without us realizing that it would be exposed through internal calls.