Stacktrace when visiting a URL with weird characters

dan

Putting in a URL like https://fusionauth.whatever/api/jwt/issue?application_id={} actually shows a Tomcat error page with a full stack trace. Is there a way to disable this or to at least remove the stack trace from the error messge?

dan

In 1.19.5, we handle most of these cases by configuring tomcat to allow certain characters to be unescaped in the URL.

So an upgrade is the most straightforward way to handle this.

If you are proxying FusionAuth (behind something like nginx) you could also capture and hide any 500 errors: https://stackoverflow.com/questions/8715064/nginx-not-serving-my-error-page/8715597#8715597.