Hacker News new | ask | show | jobs
by guessmyname 3473 days ago
You might want to disable debug mode (aka. show_exceptions setting) unless you want people to have access to sensitive information like the one contained in the "firebase.rb" file or "/root/nginx-unicorn-sinatra/app.rb". Sending an invalid User-Agent as part of the HTTP requests (like one with Unicode characters) makes the web application fail and respond with a dump of the global _SERVER variable with additional information provided by the Sinatra framework:

    curl -H "User-Agent: Foo — Bar" "http://serverlessly.io/"
1 comments

Yeah man!! added these lines in config file set :show_exceptions, false set :raise_errors, false set :dump_errors, false.

Also, working on to enable HTTPS