All Questions
2 questions
8
votes
3
answers
3k
views
Is it a security flaw to log the class and method name when an exception occurs?
I have the following :
public class doCheck(){
public void performCheck(){
try {
perform all checks......
}
catch(Exception e){
logger.error("...
- 195
11
votes
10
answers
2k
views
Should security restrictions cause a service to return null or throw an exception? [closed]
I'm in a bit of a disagreement with a more experienced developer on this issue, and wondering what others think about it; our environment is Java, EJB 3, services, etc.
The code I wrote calls a ...
- 1,102