Fix Information Disclosure

[Zachary-Squires]

Description

Changes www and app.js to improve production security by preventing internal error details from being exposed to users. Error responses now return generic messages instead of stack traces or system information, while full details are still logged internally for debugging. The update also removes identifying headers and adds safeguards to properly handle unexpected failures, reducing the risk of sensitive information being disclosed.

Developed and implemented by:
Zachary Squires - https://github.com/Zachary-Squires

Fixes Pentest Issue #14

Type of change

(Check the ones that apply by placing an "x" instead of the space in the [ ] so it becomes [x])

• Note merging this changes the database configuration.
• This change requires a documentation update

Checklist

• I have followed the OED pull request ideas
• I have removed text in ( ) from the issue request
• You acknowledge that every person contributing to this work has signed the OED Contributing License Agreement and each author is listed in the Description section.

Limitations

These changes mitigate information disclosure through application error handling but do not eliminate all potential exposure risks. Proper environment configuration and secure log management are still required to maintain production security.