In this post I will be presenting, 5 of the most common mistakes developers make when they manipulate the web.config file1Custom Errors Disabled When you disable custom errors as shown below, ASP.NET provides a detailed error message to clients by default.
Vulnerable configuration: <configuration> <system.web> <customErrors mode="Off"> Secure configuration: <configuration> <system.web> <customErrors mode="RemoteOnly"> In itself, knowing the source of an error...(
read more)

.