What is a common mistake when working with secure error handling?

A common mistake with secure error handling is returning raw exception text from production APIs can reveal implementation details and secrets while creating inconsistent contracts for clients. The safer approach is to design and test the behavior explicitly rather than assuming the platform or dependency will handle it automatically.