undefined | Better HN

0 pointsceejayoz4y ago0 comments

The code revealed there is basically all open source Laravel framework stuff, but yeah, having APP_DEBUG=true turned on has potential to expose other more meaningful vulnerabilities.

0 comments

4 comments · 2 top-level

jer0me4y ago· 2 in thread

It also offers some performance benefits IIRC

chrismorgan4y ago

I’m guessing it’s also the cause of the JavaScript using inline source maps, meaning that it’s shipping over 2MB to do⸺ I think it’s currently literally nothing but the click handler to expand the FAQs (which would be better not collapsed in the first place, or failing that, implemented with the <details> element).

ceejayozOP4y ago

No, that's (typically; in the default setup, at the very least; you could manage to make them related but it'd be a bit silly and take specific efforts) independent of APP_DEBUG.

dachryn4y ago

the real danger is that app_debug does less security checks in the middleware layers.

j / k navigate · click thread line to collapse