Fix issue security issue in Gold

go/util/http.go

 package util
 
 import (
         "bytes"
         "fmt"
         "io"
         "io/ioutil"
         "net"
         "net/http"
         "net/url"
@@ skipping 146 matching lines @@
         return resp, nil
 }
 
 // TODO(stephana): Remove 'r' from the argument list since it's not used. It would
 // be also useful if we could specify a return status explicitly.
 
 // ReportError formats an HTTP error response and also logs the detailed error message.
 func ReportError(w http.ResponseWriter, r *http.Request, err error, message string) {
         glog.Errorln(message, err)
         if err != io.ErrClosedPipe {
-                http.Error(w, fmt.Sprintf("%s %s", message, err), 500)
+                http.Error(w, message, 500)
         }
 }
 
 // responseProxy implements http.ResponseWriter and records the status codes.
 type responseProxy struct {
         http.ResponseWriter
         wroteHeader bool
 }
 
 func (rp *responseProxy) WriteHeader(code int) {
@@ skipping 82 matching lines @@
                 val, err = strconv.Atoi(valStr)
                 if err != nil {
                         return 0, fmt.Errorf("Not a valid integer value.")
                 }
         }
         if val < 0 {
                 return defaultVal, nil
         }
         return val, nil
 }