← All checks
SecurityTypical severity: Medium

Source Map Exposure Scanner

Checks whether your source maps (.map) are accessible and let anyone rebuild your original source code.

What it checks

This scanner checks whether your site's source map files (.map) are publicly accessible. Source maps link the minified code you serve back to your original source, and this check detects when they remain downloadable in production.

Why it matters

If your source maps are exposed, anyone can rebuild your original source code exactly as you wrote it, comments and structure included. That makes it easier to find internal logic, endpoints or possible secrets you thought were hidden behind minification.

How to fix it

Configure your build process to avoid publishing .map files in production, or block their access from the server or CDN. If you need them to debug errors, upload them only to your monitoring tool instead of leaving them on the public site.

Check it on your site

Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.

Scan my site free

From the blog

Related checks