Add scary comment about g.debug to the default development.update

It's not obvious that `g.debug = True` is bad to do in prod unless you've read `example.ini` as well.
enterprisey · Apr 6, 2015 · 7ec1bfa · 7ec1bfa
1 parent fc58af5
commit 7ec1bfa
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/install-reddit.sh b/install-reddit.sh
@@ -313,6 +313,9 @@ if [ ! -f development.update ]; then
 # generate a new development.ini
 
 [DEFAULT]
+# global debug flag -- displays pylons stacktrace rather than 500 page on error when true
+# WARNING: a pylons stacktrace allows remote code execution. Make sure this is false
+# if your server is publicly accessible.
 debug = true
 
 disable_ads = true