From 170014e8f0a01fb8f8581902c665ff5c1fcc1168 Mon Sep 17 00:00:00 2001
From: Benjamin Dalsass <95754414+bdalsass@users.noreply.github.com>
Date: Fri, 20 Mar 2026 14:35:05 +0100
Subject: [PATCH] =?UTF-8?q?N=C2=B09232=20-=20Information=20Disclosure=20(#?=
 =?UTF-8?q?850)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pages/ajax.render.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/pages/ajax.render.php b/pages/ajax.render.php
index 2c02f19083..2b9bc00583 100644
--- a/pages/ajax.render.php
+++ b/pages/ajax.render.php
@@ -2502,8 +2502,7 @@ EOF
 	$oKPI->ComputeAndReport('Data fetch and format');
 	$oPage->output();
 } catch (Exception $e) {
-	// note: transform to cope with XSS attacks
-	echo utils::EscapeHtml($e->GetMessage());
+	echo utils::EscapeHtml(Dict::S('UI:PageTitle:FatalError'));
 	IssueLog::Error($e->getMessage()."\nDebug trace:\n".$e->getTraceAsString());
 }