N°9232 - Information Disclosure

2026-03-19 16:04:15 +01:00 · 2026-03-19 09:41:30 +01:00
1 changed files with 1 additions and 2 deletions
--- a/pages/ajax.render.php
+++ b/pages/ajax.render.php
@@ -2502,8 +2502,7 @@ EOF
 	$oKPI->ComputeAndReport('Data fetch and format');
 	$oPage->output();
 } catch (Exception $e) {
-	// note: transform to cope with XSS attacks
-	echo utils::EscapeHtml($e->GetMessage());
+	echo utils::EscapeHtml(Dict::S('UI:PageTitle:FatalError'));
 	IssueLog::Error($e->getMessage()."\nDebug trace:\n".$e->getTraceAsString());
 }