Add back warning about dangers of enabling debug on production

ckan · Oct 12, 2012 · eeb716c · eeb716c
1 parent edde347
commit eeb716c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ckan/config/deployment.ini_tmpl b/ckan/config/deployment.ini_tmpl
@@ -8,6 +8,10 @@
 # Change debug to true when doing CKAN development, it enables Pylons'
 # interactive debugging tool, makes Fanstatic serve unminified JS and CSS
 # files, and enables CKAN templates' debugging features.
+#   
+# WARNING: *THIS SETTING MUST BE SET TO FALSE ON A PRODUCTION ENVIRONMENT*
+# Debug mode will enable the interactive debugging tool, allowing ANYONE to
+# execute malicious code after an exception is raised.
 debug = false
 
 email_to = you@yourdomain.com