在JSON响应中显示错误消息的用户输入是不好的做法吗？

I've been of the opinion that error messages should display as little information as possible to prevent any hints an attacker could use to gain access to sensitive information.I've been of the opinion that error messages sh