$Tornado debug mode

Description

This Tornado web application is running in debug mode. If you pass debug=True to the Application constructor, the app will be run in debug/development mode. In this mode, several features intended for convenience while developing will be enabled. While in debug mode the application may disclose sensitive information (such as parts of the source code, local filesystem paths, ...).

Remediation

In production is not recommended to run Tornado in debug mode.

References
Severity
Classification
Tags
  • Configuration