1]   //config\app.php add following code in file.

    'debug_blacklist' => [

        '_COOKIE' => array_keys($_COOKIE),

        '_SERVER' => array_keys($_SERVER),

        '_ENV' => array_keys($_ENV),

    ],

​

2] .htaccess

  #Disable Directory listing

Options -Indexes

​

#block files which needs to be hidden // in here specify example extension of the file 

<Files ~ "\.(git|env|json|config.js|md|gitignore|gitattributes|lock|example)$">

    Order allow,deny

    Deny from all

</Files>

​

# in here specify full file name sperator '|'

<Files ~ "(artisan)$">

    Order allow,deny

    Deny from all

</Files>