Query module MissingASPNETGlobalErrorHandler

name
Missing global error handler
description
ASP.NET applications should not set the ‘customError’ mode to “off” without providing a global error handler, otherwise they may leak exception information.
kind
problem
problem.severity
warning
precision
high
id
cs/web/missing-global-error-handler
tags
security external/cwe/cwe-12 external/cwe/cwe-248

Imports

WebConfig

Provides classes and predicates related to ASP.NET Web.config files.

XML

Provides classes and predicates for working with XML files and their content.

csharp

The default C# QL library.

Classes