Skip to content

Conversation

@Format-C-eft
Copy link

This MR proposes the removal of the default /debug endpoint, which is automatically registered by the net/http standard library. The /debug endpoint exposes debugging information that may include sensitive data, posing a potential security risk in production environments.

Key changes:

Removed the registration of the /debug handler via http.DefaultServeMux.
Benefits:

Eliminates a potential security vulnerability related to the exposure of debugging information.
Reduces the risk of data leakage in production environments.
Please review the changes and provide feedback.

@SuperQ
Copy link
Contributor

SuperQ commented Nov 11, 2025

This needs a DCO sign-off. You can use git commit -s --amend to add it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants