ASP.NET ASPX debugging enabled
Description
The ASP.NET application has debugging enabled in its compilation configuration. When debugging is enabled in production environments, detailed error messages, stack traces, and internal application information are exposed to end users. This configuration is intended only for development environments and should never be enabled in production systems.
Remediation
Disable debugging in the application's Web.config file by setting the debug attribute to false in the <compilation> element.
Locate the <system.web> section in your Web.config file and modify the compilation element as follows:
<system.web> <compilation debug="false" targetFramework="4.x" /> <!-- other configuration settings --> </system.web>
After making this change, restart the application pool or the web server to ensure the configuration takes effect. Verify that custom error pages are properly configured to display user-friendly error messages instead of detailed technical information.