Do not pass along the raw error. Closes #2491

controllers/auth/indieauth/client.go

@@ -58,7 +58,7 @@ func HandleRedirect(w http.ResponseWriter, r *http.Request) {
 	request, response, err := ia.HandleCallbackCode(code, state)
 	if err != nil {
 		log.Debugln(err)
-		msg := fmt.Sprintf("Unable to complete authentication. <a href=\"/\">Go back.</a><hr/> %s", err.Error())
+		msg := `Unable to complete authentication. <a href="/">Go back.</a><hr/>`
 		_ = controllers.WriteString(w, msg, http.StatusBadRequest)
 		return
 	}