title: GWT-RPC: hacked attempt on request payload
body: <p>My test team try to hack on the system, they found out that GWT-RPC call returned a sensitive information  (file name as emphasis as below) in response format "//EX" message. I'm amazed that I can't find any postings on this issue.</p>
  
  <p>HTTP Request (Request payload):</p>
  
  <blockquote>
    <p>7|0|5|http:/localhost:8080/Test_Web/|14B8AB60CF9C73722670313BAE18D294|<strong>abc</strong>|<strong>abc</strong>|<strong>abc</strong>|1|2|3|4|1|5|0|</p>
  </blockquote>
  
  <p>HTTP Response:</p>
  
  <blockquote>
    <p>//EX[2,1,["com.google.gwt.user.client.rpc.IncompatibleRemoteServiceException/3936916533","This application is out of date, please click the refresh button on your browser. ( Blocked attempt to access
    interface '<strong>abc</strong>', which is not implemented by '<strong><em>com.testProject.client.customerClassService</em></strong>'; this is either misconfiguration or a hack attempt)"],0,7]</p>
  </blockquote>
  
  <p>Specially the part that says "either misconfiguration or a hack attempt". In my case is hack attempt as HTTP Response, because the exception states that '<strong>abc</strong>' is not implemented by  '<em>com.testProject.client.customerClassService</em>'.</p>
  
  <p>Any ideas to hide the sensitive information (class name as emphasis) in the error message as above? I try with all browsers available it is not from the browser. </p>