Reworded the note about dump() not being available in prod

symfony · javiereguiluz · May 28, 2017 · Jul 2, 2017 · May 28, 2017 · e218df891c1af6db076db7581b6982bf4e1b8284
commit e218df891c1af6db076db7581b6982bf4e1b8284
diff --git a/templating/debug.rst b/templating/debug.rst
@@ -46,6 +46,8 @@ The same mechanism can be used in Twig templates thanks to ``dump()`` function:
        </a>
    {% endfor %}

-The variables will only be dumped if Twig's ``debug`` setting (in ``config.yml``)
-is ``true``. By default this means that the variables will be dumped in the
-``dev`` environment but not the ``prod`` environment.
+By design, the ``dump()`` function is only available if the ``debug`` setting
+(in ``config.yml``) is ``true``, to avoid leaking sensitive information in
+production. In fact, trying to use the ``dump()`` function when ``debug`` is
+``false`` (for example in the ``prod`` environment) will result in an
+application error.
-Original file line number
+Diff line change
@@ -46,6 +46,8 @@ The same mechanism can be used in Twig templates thanks to ``dump()`` function:
             </a>
         {% endfor %}
-    The variables will only be dumped if Twig's ``debug`` setting (in ``config.yml``)
-    is ``true``. By default this means that the variables will be dumped in the
-    ``dev`` environment but not the ``prod`` environment.
+    By design, the ``dump()`` function is only available if the ``debug`` setting
             Copy link

  
      
    
  

  
      

  
  Member


      

  

  
    
      

      
            xabbuh
  

      

      

      


        May 29, 2017


      
    

  


        
      
  
  
  
    

    There was a problem hiding this comment.


  

 
  
    

    Choose a reason for hiding this comment

    
      The reason will be displayed to describe this comment to others. Learn more.
    

    
      
      


  


  
    
      I think we should make more clear what the debug setting is (one may confuse twig.debug and kernel.debug which are probably the same, but which still can differ).
    
  
  


    

        
      
  
  
    
  
  
  
    
    Sorry, something went wrong.
  

  
    
  
    
      

              Uh oh!

              
There was an error while loading. Please reload this page.


  
  


          
      
  
    
    
      
        
            
    All reactions
+    (in ``config.yml``) is ``true``, to avoid leaking sensitive information in
+    production. In fact, trying to use the ``dump()`` function when ``debug`` is
+    ``false`` (for example in the ``prod`` environment) will result in an
+    application error.