How to Prevent Information Disclosure

• Make sure all developers are aware of what is considered sensitive information
• Audit any code for potential information disclosure as part of the QA/build process
• Use generic error messages as much as possible
• Double-check that debugging and diagnostics features are disabled in the prod environment
• Make sure you fully understand security implications of third party software