How can I customize the system error web page so that it does not show a stack trace?
We use SSO (CAS based) and during development saw stack trace messages that would give an attacker information that might be useful so we would like to turn it off for production.
My preference would be to display a message like "an internal error occurred". We could then troll the logs on the server to find the stack trace information.
