Description

Your Symfony web application is configured to run with debug mode enabled.

A Symfony application can be run with debug mode set to true or false (respectively 1 or 0 for the APP_DEBUG variable defined in .env). This affects many things in the application, such as displaying stacktraces on error pages or if cache files are dynamically rebuilt on each request.

When running in production it's recommended to disable the debug mode.

Remediation

To disable debug mode set the APP_DEBUG environment variable value to 0 in the .env environment configuration file.

# .env or .env.local
APP_DEBUG=0

References

Related Vulnerabilities