[ ] On the file access_confirmation.jsp .Remove the call that notifies the user the reason why access could not be granted. Use Generic message
Access could not be granted. (<%=((AuthenticationException) session
.getAttribute(AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY))
.getMessage()%>)
Please provide a generic message. For now I am removing the message and adding simple message "Access could not be granted. Please try again!". @githengi
[ ] Remove Information leak.
[ ] On the file
access_confirmation.jsp
.Remove the call that notifies the user the reason why access could not be granted. Use Generic message