SecurityInnovation/TMContentReview — Issue #79: Exception Details are Not Disclosed to the Client
Author: SergeTruth
Created: 2011-11-07 22:38:18+00:00
State: open

Verify that there is global exception handler.
The example under this section should light where a root exception handler goes.

java.lang.Exception will not catch all exceptions, only java.lang.Throwable will catch all exception.

I noticed that the finally block may leak resources if an exception is thrown in out.println(body) because resources will not be closed. It may not be an issue in this case but other code examples which work with streams will need to keep this in mind.