SEC025
Exposed exception details
Object Pascal — Delphi & Free Pascal
Warning
Security
Sending raw exception messages to clients leaks internal paths, types, and stack traces
sending raw exception messages to clients leaks internal paths, types, and stack traces.
Why this severity
sending raw exception messages to clients leaks internal paths, types, and stack traces.
Known false positives
debug-mode responses gated behind a development flag.
Remediation example
Response.Content := 'An internal error occurred.'; LogError(E.Message); // log detail server-side only