graphql-dotnet: Option to skip serialization of exception data to prevent leaking sensitive information

Summary

Similary to ExposeExceptions allow to disable serialization of Exception.Data that can contain sensitive data.

Basic example

services.AddGraphQL(options =>
{
    options.ExposeExceptions = false;
    options.ExposeExceptionExtensions = false; // Something like this
})

Motivation

Certain exceptions can possible leak sensitive information through Exception.Data.

In the example response below, we are leaking confidential data about our database server through Microsoft.Data.SqlClient.SqlException and there is no simple way to prevent this from happening globally (according to ExecutionResultJsonConverter)

{
    "data": ...,
    "errors": [
        {
            "message": "Error trying to resolve...",
            "locations": [],
            "path": [],
            "extensions": {
                "code": "SQL",
                "data": {
                    "HelpLink.ProdName": "Microsoft SQL Server",
                    "HelpLink.ProdVer": "12.00.2000",
                    "HelpLink.EvtSrc": "MSSQLServer",
                    "HelpLink.EvtID": "208",
                    "HelpLink.BaseHelpUrl": "http://go.microsoft.com/fwlink",
                    "HelpLink.LinkId": "20476",
                    "OriginalClientConnectionId": "<CENSORED>",
                    "RoutingDestination": "<CENSORED>"
                }
            }
        }
    ]
}