Debug Mode in Production: Consoles, Profilers and Dev Servers on the Open Internet
A debug flag or a development server that reaches production turns developer tooling into an attack surface: interactive consoles, profilers that record every request, and servers that read files straight off disk. Here is how it happens, what it exposes, and how to ship a build that cannot carry it.