Security concerns

LeonidasPapoulakis

Hello,

I am new to the WorkSuite SaaS, and i have some concerns as it is very easy to see the source code of the application! For example if you type www.yourdomain.com/saas/js/main.js you can see the source code! When a bug happens and the app returns a error, you see the source code again!

How this can affect the security of the app?

abhinav-froiden

LeonidasPapoulakis

.js and .css files are always available for all the apps.

For the error pages, this can be disabled by turning off the App Debug in admin settings.

LeonidasPapoulakis

abhinav-froiden
Hello,

can you let me know where is the App Debug option, as i couldn't find it under Super Admin account!

LeonidasPapoulakis

Any update?

abhinav-froiden

In your .env file set APP_DEBUG=false and then clear cache from superadmin panel settings.