exceptional-conditions

From README

Exceptional Conditions Security Check (A05:2025) What this checks Protects against information disclosure and fail-open logic. Stack traces in API responses leak internal paths, library versions, and logic for attackers to target; swallowed exceptions and default-allow error paths grant unintended access. Vulnerable patterns Error handler that returns the raw exception message, stack trace, or internal path in the HTTP response body Catch block that silently swallows exceptions with no logging, re-raise, or controlled error Authorization or permission exception caught and turned into a success or fall-through that grants access Debug or verbose-error flag enabled at deployment, exposing tracebacks to clients Default framework error page left in place, leaking file paths, library versions, or framework banner Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties: Client responses carry no internal detail.