From 324a4a1bb14fc23d04ed9360c7bb43f94b8e3e59 Mon Sep 17 00:00:00 2001 From: antuarc Date: Fri, 28 Jun 2019 10:32:09 +1000 Subject: [PATCH] update the 'debug' warning to better match the documentation - it's not just production environments that are at risk, any publicly visible site must not use debug mode - github #4871 --- ckan/config/deployment.ini_tmpl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ckan/config/deployment.ini_tmpl b/ckan/config/deployment.ini_tmpl index a07e481b739..1699498bd92 100644 --- a/ckan/config/deployment.ini_tmpl +++ b/ckan/config/deployment.ini_tmpl @@ -13,7 +13,8 @@ [DEFAULT] -# WARNING: *THIS SETTING MUST BE SET TO FALSE ON A PRODUCTION ENVIRONMENT* +# WARNING: *THIS SETTING MUST BE SET TO FALSE ON A PUBLIC ENVIRONMENT* +# With debug mode enabled, a visitor to your site could execute malicious commands. debug = false [server:main]