security issue in error log of request handler

[xzer]

when there is error in a handler, the framework will output the details of current handler to log, with the values of invoking parameters, which may cause security issue that insensitive information will be recorded to log file unintentionally.

But from the debug perspective, the invoking parameters value is obviously important to developer, so I think that these information output should be optional and the default should be false.