Impact:Unknown 'null' severity
Likelihood:Unknown 'null' severity
Do not enable debug features on production servers.
The .Net Core framework offers multiple features which help during debug. Microsoft.AspNetCore.Builder.IApplicationBuilder.UseDeveloperExceptionPage and Microsoft.AspNetCore.Builder.IApplicationBuilder.UseDatabaseErrorPage are two of them. Make sure that those features are disabled in production.
Use If env.IsDevelopment() to disable debug code.
This rule raises issues when the following .Net Core methods are called: Microsoft.AspNetCore.Builder.IApplicationBuilder.UseDeveloperExceptionPage, Microsoft.AspNetCore.Builder.IApplicationBuilder.UseDatabaseErrorPage. No Issue is raised when those calls are disabled by if (env.IsDevelopment()).
This rule does not analyze configuration files. Make sure that debug mode is not enabled by default in those files.