It would be fair to note that for the 'debug=hostname' convention you would also have to write the code to check the hostname against the debugged-ness.
I think it would be quite nice if the debugger had an option to only present itself to a list of remote IP addresses. However, I suggest the strongest protection would be to not install Werkzeug at all in the Python environment that runs your production service. The unavailability of other resources such as 'the testing database' could also prevent your code from running at all in production if you make the boneheaded mistake of trying to run it with the development config file. -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en.
