Exploiting Error Messages – Script Error Messages – Stack Traces – Informative Debug Messages – Server and Database Messages – Using Public Information Gathering Published Information Using Inference Preventing Information Leakage – Use Generic Error Messages – Protect Sensitive Information – Minimize Client-Side Information Leakage Chapter Summary Outline Many web applications return informative error messages when unexpected events occur.
{}