Disable hidden stack trace on failed login

[rhouston]

Hi all,

Sorry if this has been asked and answered.

Is there a way to disable the hidden stack trace contained in the page source on a failed login in the web client? Our pen testers suggested that we disable this if possible as is provides a whack of info about the mail system that could be user to mine more info.

Any help would be greatly appreciated.

Thanks!

Rich