handbook/tools/3.Web-Hacking/3.Business-Logic/Information-Disclosure/Notes/4.How-to-Prevent-Information-Disclosure.md

8 lines
436 B
Markdown
Raw Normal View History

2024-08-30 23:07:22 +00:00
## How to Prevent Information Disclosure
- Make sure all developers are aware of what is considered sensitive information
- Audit any code for potential information disclosure as part of the QA/build process
- Use generic error messages as much as possible
- Double-check that debugging and diagnostics features are disabled in the prod environment
- Make sure you fully understand security implications of third party software