Laravel debug mode enabled
Description
The Laravel framework is running with debug mode enabled in a production environment. When enabled, Laravel's debug mode exposes detailed error messages, stack traces, environment variables, and application configuration details to end users. This feature is intended solely for development environments and should always be disabled in production to prevent information disclosure.
Remediation
Disable Laravel debug mode immediately by setting the APP_DEBUG environment variable to false. This can be accomplished through the following steps:
1. Open the .env file in your Laravel application root directory
2. Locate the APP_DEBUG configuration variable
3. Set it to false:
APP_DEBUG=false
4. Clear the application cache to ensure the change takes effect:
php artisan config:cache
5. Verify the change by triggering an error and confirming that detailed debug information is no longer displayed
For production deployments, ensure your deployment process automatically sets APP_DEBUG=false and that this setting is enforced through environment-specific configuration management.