Every check ยท Exposed files
Debug panels
What it checks
/_profiler/, /telescope/requests
Why it matters
Symfony's profiler or Laravel Telescope shows recent requests, queries, settings and errors.
How to fix it
- Turn debugging off in production: APP_ENV=prod and APP_DEBUG=0 for Symfony, or Telescope off.
- If it must stay, restrict it to your own address, or with Telescope's gate.
Check a site for this and everything else: snag.page. More on exposed files: Exposed files Keys in scripts Git repository Environment files wp-config.php copies Database dumps AWS and npm credentials Private SSH keys Editor upload settings Spring Boot actuator Terraform state Git credentials Kubernetes config phpinfo() pages Subversion and Mercurial Backup archives Password files PHP error logs Laravel logs ELMAH error logs Database admin pages Apache server-status Go's pprof docker-compose.yml Directory listings .DS_Store files WordPress users