disable showerrors by default (simplesamlphp#2513)

mcdruid · web-flow · commit 6b1e2bfda233 · 2025-10-20T09:12:40.000+10:00
diff --git a/config/config.php.dist b/config/config.php.dist
@@ -344,7 +344,7 @@ $config = [
      * When 'errorreporting' is enabled, a form will be presented for the user to report
      * the error to 'technicalcontact_email'.
      */
-    'showerrors' => true,
+    'showerrors' => false,
     'errorreporting' => true,
 
     /*
diff --git a/src/SimpleSAML/Error/Error.php b/src/SimpleSAML/Error/Error.php
@@ -261,7 +261,7 @@ public function show(int $logLevel = Logger::ERR, bool $suppressReport = false):
         $config = Configuration::getInstance();
 
         $data = [];
-        $data['showerrors'] = $config->getOptionalBoolean('showerrors', true);
+        $data['showerrors'] = $config->getOptionalBoolean('showerrors', false);
         $data['error'] = $errorData;
         $data['errorCode'] = $this->errorCode;
         $data['parameters'] = $this->parameters;
