    public function getLoginFormURL()
    {
        return './index.php';
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.