webupdate

backend/middleware/errorHandler.js

@@ -104,10 +104,10 @@ const notFoundHandler = (req, res) => {
     return;
   }
 
+  // SECURITY: Don't expose path in response to prevent information disclosure
   res.status(404).json({
     success: false,
     message: "Route not found",
-    path: req.path,
   });
 };