Hi Hen,

Would you mind updating the class docs and site docs to make it more
obvious to tell folks how to debug and what the pros and cons are?

Do you think the fixes since 3.6.0 are worth a 3.6.1 soon? I can RM the
release if you are busy. Just let me know.

Thank you!
Gary

On Fri, Dec 5, 2025, 05:42 Henri Biestro <[email protected]> wrote:

> Hi there;
> Indeed, the debug feature has been mostly lost... The only correct remnant
> of it is the Engine comment stating 'Whether error messages will carry
> debugging information'. Its main purpose is/was avoiding leaking
> class/method/line information in logs due to exceptions or error logging
> which can be considered dangerous for the vulnerability-anxious. It is no
> longer completely functional for scripts since a default JexlInfo - which
> captures the caller location - is created by the parser if lacking.
> Let me restore the feature to its former glory (JEXL-452) :-)
> Cheers
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>

Reply via email to