Make tracebacks opt-in (#27059)

Instead of showing tracebacks by default, make the end user opt-in instead. (cherry picked from commit 4b113ef)
apache · Oct 18, 2022 · 92cd1bf · 92cd1bf
1 parent e4b87ba
commit 92cd1bf
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/airflow/config_templates/config.yml b/airflow/config_templates/config.yml
@@ -1232,7 +1232,7 @@
       version_added: 1.10.8
       type: string
       example: ~
-      default: "True"
+      default: "False"
     - name: dag_default_view
       description: |
         Default DAG view. Valid values are: ``grid``, ``graph``, ``duration``, ``gantt``, ``landing_times``

diff --git a/airflow/config_templates/default_airflow.cfg b/airflow/config_templates/default_airflow.cfg
@@ -631,7 +631,7 @@ expose_config = False
 expose_hostname = True
 
 # Expose stacktrace in the web server
-expose_stacktrace = True
+expose_stacktrace = False
 
 # Default DAG view. Valid values are: ``grid``, ``graph``, ``duration``, ``gantt``, ``landing_times``
 dag_default_view = grid

diff --git a/newsfragments/000.significant.rst b/newsfragments/000.significant.rst
@@ -0,0 +1,3 @@
+Default for ``[webserver] expose_stacktrace`` changed to ``False``
+
+The default for ``[webserver] expose_stacktrace`` has been set to ``False``, instead of ``True``. This means administrators must opt-in to expose tracebacks to end users.