News for hackers. Stuff that matters.

A comment on Show HN: I rolled my own simple support / Helpdesk SaaS aimed at Indie Hackers. Parent comment

Re:Show HN: I rolled my own simple support / Helpdesk SaaS a... by ceejayoz on Monday February 21, 2022 @10:29PM (#30423703)
The code revealed there is basically all open source Laravel framework stuff, but yeah, having APP_DEBUG=true turned on has potential to expose other more meaningful vulnerabilities.
[ Parent | on HN ]
Re:Show HN: I rolled my own simple support / Helpdesk SaaS a... by jer0me on Monday February 21, 2022 @10:49PM (#30423804)
It also offers some performance benefits IIRC
[ Parent | on HN ]
Re:Show HN: I rolled my own simple support / Helpdesk SaaS a... by chrismorgan on Monday February 21, 2022 @11:19PM (#30423934)
I’m guessing it’s also the cause of the JavaScript using inline source maps, meaning that it’s shipping over 2MB to do⸺ I think it’s currently literally nothing but the click handler to expand the FAQs (which would be better not collapsed in the first place, or failing that, implemented with the <details> element).
[ Parent | on HN ]
Re:Show HN: I rolled my own simple support / Helpdesk SaaS a... by ceejayoz on Tuesday February 22, 2022 @09:32AM (#30428336)
No, that's (typically; in the default setup, at the very least; you could manage to make them related but it'd be a bit silly and take specific efforts) independent of APP_DEBUG.
[ Parent | on HN ]
Re:Show HN: I rolled my own simple support / Helpdesk SaaS a... by dachryn on Tuesday February 22, 2022 @01:13AM (#30424554)
the real danger is that app_debug does less security checks in the middleware layers.
[ Parent | on HN ]