Access control seems correct, but error responses reveal stack traces or internal IDs.This doesn’t break functionality, but it feels risky from a security standpoint.I’m not sure how much information is safe to expose in errors.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.