AL1310_ExceptionLeakedInResponse.md

AL1310: Exception details leaked in HTTP response

Property	Value
Severity	Warning
Category	Reliability
Code fix	No
Analyzer	Al1310ExceptionLeakedInResponseAnalyzer
Enabled by default	Yes

Description

Returning exception messages, stack traces, or ToString() output in HTTP responses can expose sensitive implementation details. Return a generic error message and log the exception server-side.

See also

• Rule index
• Source: AL1310ExceptionLeakedInResponseAnalyzer.cs