update the 'debug' warning to better match the documentation

- it's not just production environments that are at risk, any publicly visible site must not use debug mode - github #4871
ckan · Jun 28, 2019 · 324a4a1 · 324a4a1
1 parent 8d0d0a1
commit 324a4a1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/ckan/config/deployment.ini_tmpl b/ckan/config/deployment.ini_tmpl
@@ -13,7 +13,8 @@
 
 [DEFAULT]
 
-# WARNING: *THIS SETTING MUST BE SET TO FALSE ON A PRODUCTION ENVIRONMENT*
+# WARNING: *THIS SETTING MUST BE SET TO FALSE ON A PUBLIC ENVIRONMENT*
+# With debug mode enabled, a visitor to your site could execute malicious commands.
 debug = false
 
 [server:main]