From the course: Secure Coding in Java

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Exception leaks

Exception leaks - Java Tutorial

From the course: Secure Coding in Java

Start my 1-month free trial

Exception leaks

- [Instructor] Nothing says, oops, like an exception message on a webpage. It just looks bad, but it's also very dangerous. Even more error handling can lead to sensitive data loss. And as such we need to handle all of these situations appropriately. Let's start with discussing our exception handling and the dangers that can arise from improperly doing so. First of all, leaking an exception to the user interface reveals detailed information about the system. You are immediately telling the user or worse a bad actor, a way to trigger an exception in your system. You are also giving them insights about your application as a whole. Now, bad actors can use this data especially a full stack trace to learn about the internal structure of your application. These stack traces, for instance, in the UI, lets them know the languages that play and the class structures and any additional components. And this is what brings us to the real…

Contents