fix: avoid information exposure through exceptions (CWE-209, CWE-497)

Replace str(exc) with generic 'Internal server error' in all API error responses.
Exception details are still logged server-side via _LOGGER.exception().
Bump 2.2.1 -> 2.2.2

Author: Franz646

custom_components/orphan_cleaner/const.py

@@ -47,4 +47,4 @@
 PANEL_ICON = "mdi:broom"
 
 # Versione corrente (usata per cache-busting)
-VERSION = "2.2.1"
+VERSION = "2.2.2"

custom_components/orphan_cleaner/manifest.json

@@ -1,7 +1,7 @@
 {
   "domain": "orphan_cleaner",
   "name": "Orphan Entity Cleaner",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "documentation": "https://github.com/Franz646/orphan-cleaner",
   "issue_tracker": "https://github.com/Franz646/orphan-cleaner/issues",
   "codeowners": [

custom_components/orphan_cleaner/panel_api.py

@@ -79,7 +79,7 @@ async def get(self, request: web.Request) -> web.Response:
             return web.Response(
                 status=500,
                 content_type="application/json",
-                text=json.dumps({"error": str(exc), "orphans": [], "total": 0}),
+                text=json.dumps({"error": "Internal server error", "orphans": [], "total": 0}),
             )
 
 
@@ -121,7 +121,7 @@ async def post(self, request: web.Request) -> web.Response:
             return web.Response(
                 status=500,
                 content_type="application/json",
-                text=json.dumps({"error": str(exc)}),
+                text=json.dumps({"error": "Internal server error"}),
             )
 
 
@@ -174,7 +174,7 @@ async def post(self, request: web.Request) -> web.Response:
             return web.Response(
                 status=500,
                 content_type="application/json",
-                text=json.dumps({"error": str(exc)}),
+                text=json.dumps({"error": "Internal server error"}),
             )
 
 # ---------------------------------------------------------------------------