> It still means I'm sending potentially sensitive data (idk, passwords) to a server I don't own Not sure if you missed spicyj's point or arguing that you your

> It still means I'm sending potentially sensitive data (idk, passwords) to a server I don't own Not sure if you missed spicyj's point or arguing that you yourself might not notice the sensitive data in the url. If you - as the developer - need to inquire more about the error (say after reproducing it on production), you copy and paste the error url and remove the sensitive data before going to said url.