Fix TSA issues (#6590)

* Set enableVersionHeader to 'false' everywhere

* Disable ASP.NET debug mode by default

Author: skofman1

src/NuGetGallery/Areas/Admin/DynamicData/Content/Images/web.config

@@ -5,6 +5,7 @@
 -->
 <configuration>
   <system.web>
+    <httpRuntime enableVersionHeader="false"/>
     <httpHandlers>
       <clear />
     </httpHandlers>

src/NuGetGallery/Areas/Admin/DynamicData/web.config

@@ -5,6 +5,7 @@
 -->
 <configuration>
   <system.web>
+    <httpRuntime enableVersionHeader="false"/>
     <httpHandlers>
       <add path="*.aspx" verb="*" type="System.Web.HttpNotFoundHandler" validate="true" />
     </httpHandlers>

src/NuGetGallery/Areas/Admin/Views/Web.config

@@ -28,6 +28,7 @@
   </appSettings>
 
   <system.web>
+    <httpRuntime enableVersionHeader="false"/>
     <httpHandlers>
       <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>
     </httpHandlers>

src/NuGetGallery/Branding/Views/web.config

@@ -29,6 +29,7 @@
   </appSettings>
 
   <system.web>
+    <httpRuntime enableVersionHeader="false"/>
     <httpHandlers>
       <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>
     </httpHandlers>

src/NuGetGallery/Views/web.config

@@ -30,6 +30,7 @@
   </appSettings>
 
   <system.web>
+    <httpRuntime enableVersionHeader="false"/>
     <httpHandlers>
       <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>
     </httpHandlers>

src/NuGetGallery/Web.config

@@ -292,7 +292,7 @@
   -->
   <system.web>
     <httpCookies requireSSL="true" httpOnlyCookies="true"/>
-    <compilation debug="true" targetFramework="4.6.2"/>
+    <compilation debug="false" targetFramework="4.6.2"/>
     <pages controlRenderingCompatibilityVersion="4.0">
       <namespaces>
         <add namespace="System.Web.Helpers"/>

src/NuGetGallery/api/Web.config

@@ -3,4 +3,7 @@
   <system.webServer>
     <httpErrors errorMode="DetailedLocalOnly" />
   </system.webServer>
+  <system.web>
+    <httpRuntime enableVersionHeader="false"/>
+  </system.web>
 </configuration>