fix(security): change ErrorRendererFactory isDebugMode default to false
All checks were successful
Test Runner / test-basic (push) Successful in 7s
Test Runner / test-php (push) Successful in 8s
Deploy Application / deploy (push) Successful in 43s

Change the default value of $isDebugMode constructor parameter from
true to false, following the security-by-default principle. This ensures
that even if the factory is instantiated without explicit debug mode
configuration, it won't leak sensitive debugging information like
stack traces, file paths, and code context.
This commit is contained in:
2025-11-25 04:09:41 +01:00
parent 77505edabf
commit 57eabe30a5

View File

@@ -20,7 +20,7 @@ final readonly class ErrorRendererFactory
private ExecutionContext $executionContext, private ExecutionContext $executionContext,
private Engine $engine, private Engine $engine,
private ?ConsoleOutput $consoleOutput = null, private ?ConsoleOutput $consoleOutput = null,
private bool $isDebugMode = true private bool $isDebugMode = false
) {} ) {}
/** /**