Flight vulnerable to sensitive information disclosure via default error handler