I am running MSOCAF on my SharePoint 2010 solution. I have customized my error messages that are displayed on custom Error page. But MSOCAF is complaining about this formatting and customization with this message (Information Disclosure through exception). Though I have HtmlEncoded my string but still its of no use. I found some suggestions on using AntiXSS library but I don't want to use this. Is there any other way out to get rid of this error.