{"action":"created","issue":{"url":"https://api.github.com/repos/cachethq/Cachet/issues/378","labels_url":"https://api.github.com/repos/cachethq/Cachet/issues/378/labels{/name}","comments_url":"https://api.github.com/repos/cachethq/Cachet/issues/378/comments","events_url":"https://api.github.com/repos/cachethq/Cachet/issues/378/events","html_url":"https://github.com/cachethq/Cachet/issues/378","id":54350300,"number":378,"title":"Error pages reveal database password ","user":{"login":"iMstr","id":1625272,"avatar_url":"https://avatars.githubusercontent.com/u/1625272?v=3","gravatar_id":"","url":"https://api.github.com/users/iMstr","html_url":"https://github.com/iMstr","followers_url":"https://api.github.com/users/iMstr/followers","following_url":"https://api.github.com/users/iMstr/following{/other_user}","gists_url":"https://api.github.com/users/iMstr/gists{/gist_id}","starred_url":"https://api.github.com/users/iMstr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iMstr/subscriptions","organizations_url":"https://api.github.com/users/iMstr/orgs","repos_url":"https://api.github.com/users/iMstr/repos","events_url":"https://api.github.com/users/iMstr/events{/privacy}","received_events_url":"https://api.github.com/users/iMstr/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-01-14T17:24:26Z","updated_at":"2015-07-07T14:41:03Z","closed_at":"2015-01-14T17:44:28Z","body":"The Symfony errror page shows the database password right in the Environment Variables. This can be a security threat that allows people who know a bug that they can trigger to display the database connection details. "},"comment":{"url":"https://api.github.com/repos/cachethq/Cachet/issues/comments/119224611","html_url":"https://github.com/cachethq/Cachet/issues/378#issuecomment-119224611","issue_url":"https://api.github.com/repos/cachethq/Cachet/issues/378","id":119224611,"user":{"login":"robertaspinall","id":12032886,"avatar_url":"https://avatars.githubusercontent.com/u/12032886?v=3","gravatar_id":"","url":"https://api.github.com/users/robertaspinall","html_url":"https://github.com/robertaspinall","followers_url":"https://api.github.com/users/robertaspinall/followers","following_url":"https://api.github.com/users/robertaspinall/following{/other_user}","gists_url":"https://api.github.com/users/robertaspinall/gists{/gist_id}","starred_url":"https://api.github.com/users/robertaspinall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robertaspinall/subscriptions","organizations_url":"https://api.github.com/users/robertaspinall/orgs","repos_url":"https://api.github.com/users/robertaspinall/repos","events_url":"https://api.github.com/users/robertaspinall/events{/privacy}","received_events_url":"https://api.github.com/users/robertaspinall/received_events","type":"User","site_admin":false},"created_at":"2015-07-07T14:41:03Z","updated_at":"2015-07-07T14:41:03Z","body":"We've done that, but the verbose error pages persist.\n\n\nRobert Aspinall\n\nNOAA's National Ocean Service\nCO-OPS/Information Systems Division\n1305 East-West Highway\nBldg. SSMC4, Station Id 6314\nSilver Spring, MD 20910\n\nRobert.Aspinall@noaa.gov\n\n\nOn Tue, Jul 7, 2015 at 10:39 AM, James Brooks <notifications@github.com>\nwrote:\n\n> With the latest version of Cachet, you need to change the .env file now.\n> Specifically APP_DEBUG=false and APP_ENV=production.\n>\n> --\n> Reply to this email directly or view it on GitHub\n> <https://github.com/cachethq/Cachet/issues/378#issuecomment-119224190>.\n>\n"}}