SVN: r25809 - trunk/quixote
David Binger <dbinger-fVcApmY9cLvQ3/1i3zOLAti2O/[email protected]> Tue, 21 Dec 2004 11:40:09 -0500
| Newsgroups | gmane.comp.web.quixote.cvs |
|---|---|
| Message-ID | <[email protected]> |
Author: dbinger
Date: 2004-12-21 08:22:37 -0500 (Tue, 21 Dec 2004)
New Revision: 25809
Modified:
trunk/quixote/config.py
trunk/quixote/errors.py
Log:
Remove references to 'secure_errors' configuration variable.
The private_message of an exception is cleared if display_exceptions is false.
Modified: trunk/quixote/config.py
===================================================================
--- trunk/quixote/config.py 2004-12-20 16:59:04 UTC (rev 25808)
+++ trunk/quixote/config.py 2004-12-21 13:22:37 UTC (rev 25809)
@@ -125,7 +125,6 @@
'error_email',
'access_log',
'display_exceptions',
- 'secure_errors',
'error_log',
'compress_pages',
'form_tokens',
Modified: trunk/quixote/errors.py
===================================================================
--- trunk/quixote/errors.py 2004-12-20 16:59:04 UTC (rev 25808)
+++ trunk/quixote/errors.py 2004-12-21 13:22:37 UTC (rev 25809)
@@ -18,10 +18,10 @@
public_msg should be a user-readable message that reveals no
inner workings of your application; it will always be shown.
- private_msg will only be shown if the config option SECURE_ERRORS is
- false; Quixote uses this to give you more detail about why the error
+ private_msg will only be shown if the config option DISPLAY_EXCEPTIONS is
+ true; Quixote uses this to give you more detail about why the error
occurred. You might want to use it for similar, application-specific
- information. (SECURE_ERRORS should always be true in a production
+ information. (DISPLAY_EXCEPTIONS should always be false in a production
environment, since these details about the inner workings of your
application could conceivably be useful to attackers.)
@@ -38,7 +38,7 @@
def __init__(self, public_msg=None, private_msg=None):
self.public_msg = public_msg
- self.private_msg = private_msg # cleared if SECURE_ERRORS is true
+ self.private_msg = private_msg # cleared if DISPLAY_EXCEPTIONS is false
def __str__(self):
return self.private_msg or self.public_msg or "???"