BETA Shoulder is in beta — Findings may sometimes be wrong. Your feedback shapes what we fix next. Share feedback
Rules / Go

Fiber Debug Mode in Production

Description

Fiber debug configuration exposes route structure and stack traces.

How to fix

Use production configuration to disable debug output.

```go
app := fiber.New(fiber.Config{
    DisableStartupMessage: true,
    EnablePrintRoutes:     false,
})
```

Learn more: https://shoulder.dev/learn/go/cwe-489/debug-mode

Applies to

Languages

Frameworks

fiber

References

Scan for this issue

Detect with Shoulder CLI
npx @shoulderdev/cli trust --rule=go-fiber-debug-mode-production .

Related rules