Never send exception text (SQL included) to the browser

Shipped

October 26, 2026 at 4:24 PM UTC

Author

Kamo

Commit

5eac4cc

BaseLosController.error() put e.getMessage() in every 500 body; the pipeline page showed a full JDBC statement. The exception now goes to the log under a short reference and the caller gets a plain sentence (and a 503 "busy, try again" for a Yugabyte 40001). The borrower portal's 500s get the same.