Return only the exception message to clients; log full traceback server-side via logger.error(..., exc_info=True). Prevents disclosure of internal paths, library versions, and code structure (CWE-209). |
||
|---|---|---|
| .. | ||
| api | ||
| models | ||
| services | ||
| utils | ||
| __init__.py | ||
| config.py | ||