Application error reveals hosted user's Company

Question

When you get this error, you can click on 'diagnostic resources' which takes you to https://{site-name}.scm.azurewebsites.net/detectors which in turn goes to your company's login site.

I assume this isn't the desired behavior. I don't think personal information of a user should be revealed if the site gives an error. I don't think this holds up in Europe.

Not sure where else to post it

Answer 1

Hi @Marcel Croes

The quickest way to achieve that is by adding access restrictions to Kudu and only allow such access from your own IP address.

Kindly check this tutorial: https://learn.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions?tabs=azurecli