In order to not allow access to internal information like the stacktraces (contained by default when includeStackTrace option is set) or the serialized form of an exception (serializeException set to true, default is false) a global configuration option allowExtendedErrorInfo would avoid this even when these options are provided as query parameters.
See also hawtio/hawtio#2076 for an use case.