Safer handling of internal server errors (500)

[StLyn4]

First of all, I want to say a huge thank you to everyone who took part in the development! You are making a great product!

I want to ask a small question regarding error handling. Don't you think that unhandled internal errors (those with code 500) are better hidden? I mean their text. There can be anything, up to some sensitive data. I think this is still not a big enough problem to consider it a vulnerability. However, it is still a potential source of sensitive information leakage. Therefore, I suggest that before sending a response, check the error code and replace the response with something in the spirit of "Something went wrong". At the same time, output information to the terminal as before. As I understand it, this happens in src/graphql/errorHandler.ts and src/express/middleware/errorHandler.ts.

[StLyn4]

You can also use a config.debug check to display the text as is, if the user sees fit.