fix(security): change ErrorRendererFactory isDebugMode default to false
Change the default value of $isDebugMode constructor parameter from true to false, following the security-by-default principle. This ensures that even if the factory is instantiated without explicit debug mode configuration, it won't leak sensitive debugging information like stack traces, file paths, and code context.
This commit is contained in:
@@ -20,7 +20,7 @@ final readonly class ErrorRendererFactory
|
|||||||
private ExecutionContext $executionContext,
|
private ExecutionContext $executionContext,
|
||||||
private Engine $engine,
|
private Engine $engine,
|
||||||
private ?ConsoleOutput $consoleOutput = null,
|
private ?ConsoleOutput $consoleOutput = null,
|
||||||
private bool $isDebugMode = true
|
private bool $isDebugMode = false
|
||||||
) {}
|
) {}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|||||||
Reference in New Issue
Block a user