Merge pull request #32022 from owncloud/document-config-debug-option-…

…danger Document security implications of enabling debug in production
owncloud · Jul 10, 2018 · 00402f3 · 00402f3
2 parents b5b8611 + 11cbe8b
commit 00402f3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/config/config.sample.php b/config/config.sample.php
@@ -1354,6 +1354,11 @@
  *
  * Only enable this for local development and not in production environments
  * This will disable the minifier and outputs some additional debug information
+ *
+ * .. warning::
+ *    Be warned that, if you set this to ``true``, exceptions display
+ *    stack traces on the web interface, *including passwords*, — **in plain text!**.
+ *    We strongly encourage you never to use it in production.
  */
 'debug' => false,