I have submitted my app for security review, which is failed due to 'Information Disclosure' issue. I am not getting how to resolve this issue.
Please, can someone guide.
Report from Salesforce: Issue Description
Revealing system data or debugging information helps an adversary learn about the system and form a plan of attack. An information leak occurs when system data or debugging information leaves the program through an output stream or logging function.
More info at https://www.owasp.org/index.php/Information_Leakage
CWE: 200 Finding 1 of 2 URL https://api.xero.com/api.xro/2.0/accounts Notes Attack Parameter: oauth_timestamp
Reproduction Steps: 1) Paste the above url in browser 2) Intercept the request using proxy tool 3) Add necessary headers other than "oauth_timestamp"