Security Test: Console Error¶

Description¶

Default Severity: low

The error means that something went wrong in the code running on the page, and it showed up in the browser’s console. While it might seem like just a glitch, it can sometimes indicate that internal details about your app are being exposed—information that could help an attacker figure out weaknesses or the technology stack you’re using. This vulnerability often comes from a mix of coding mistakes and insufficient error handling, especially if detailed error messages are left on in a production environment. Developers might overlook sanitizing inputs or catching exceptions properly, which can lead to exposing more information than intended. Left unchecked, these issues not only confuse users but also increase the risk of security breaches by giving potential attackers tools to probe your application.

Configuration¶

Identifier: information_disclosure/console_error

Examples¶

All configuration available:

checks:
  information_disclosure/console_error:
    skip: false # default

Compliance and Standards¶