Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set debug=False by default #29

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Commits on Oct 4, 2015

  1. Set debug=False by default

    This changes the app to run with DEBUG=False unless the environment variable for FLASK_DEBUG has been explicitly set. [Flask's docs](http://flask.pocoo.org/docs/0.10/quickstart/#debug-mode) include a note about how this should never be run on production with debug=True. [Patreon](http://labs.detectify.com/post/130332638391/how-patreon-got-hacked-publicly-exposed-werkzeug) was supposedly just hacked because one of their test servers had debug=True enabled so I think it makes sense to keep it disabled by default in the interest of security.
    kevinlondon committed Oct 4, 2015
    Configuration menu
    Copy the full SHA
    9d19337 View commit details
    Browse the repository at this point in the history