Sending error stack on 500 server error

[eshaham]

Isn't it a bad practice security wise to send the error stack trace back to the client in case of uncaught exception?

This is currently what we have on express.js config file:

res.status(500).render('500', {
    error: err.stack
});

[amoshaviv]

fixed in the new version