OWASPASVS 5.0 requirement
ASVS-V16.5.1 A generic message is returned to the consumer when an unexpected or security-sensitive error occurs, ensuring no exposure of sensitive…
- Standard
- OWASP ASVS 5.0
- Chapter
- V16 Security Logging and Error Handling
- Section
- V16.5 Error Handling
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that a generic message is returned to the consumer when an unexpected or security-sensitive error occurs, ensuring no exposure of sensitive internal system data such as stack traces, queries, secret keys, and tokens.