Stack traces and Errors - Portal

[Former Member]

Hello,

I would like to know what information does the stack trace contain? Is this information, sensitive, can it lead to security threat?

Errors presented on the portal screen, e.g. 500 Internal Server Error can that lead to security threat?

If yes, What kind of error message can be presented and how can that be configured in portal?

Thank you in advance.

Best regards,

Dharmi

[mvoros]

Hi,

it's not a problem to change default error pages (see this [wiki|http://wiki.sdn.sap.com/wiki/display/EP/CustomizingErrorMessagesinPortal]). So you can minimize the risk of leaking sensitive information pretty easily. The users will get less scared of error messages as well

Cheers

[Former Member]

Thanks Martin.