Skip to content

Error Handling and Exceptions

Published on

Improper error handling can cause information leakage, which can assist/enable an attacker. Investigate how to generate exceptions securely through various .NET methods. Learn how to recognize information leakages via error-messaging mechanisms that can be exploited by attackers, and how to mitigate via sanitizing/homogenizing such messages to reveal as little as possible to a potential attacker.