← all rules

code/django-debug-true

Django DEBUG enabled

highFramework-awareframework:djangoCWE-489python

What it detects

`DEBUG = True` in Django serves detailed stack traces (with settings and local variables) to anyone who triggers an error, and disables several security protections. It must be False in production.

How it runs

Gated on framework detection: the repo's manifests (package.json, requirements.txt, pom.xml, Gemfile, composer.json) are read to identify the stack, and the rule only runs against matching-language files when its framework is present.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.