It is a leading practice to suppress detailed errors in the following places:
Web Server configuration files
Application configuration files
Application error handlers
All of the above