[airflow] 03/05: Make tracebacks opt-in (#27059)

[ep...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

ephraimanierobi pushed a commit to branch v2-4-test
in repository https://gitbox.apache.org/repos/asf/airflow.git

commit 2d92daa818d5eef8af94cf416ac4e924ed162ae0
Author: Jed Cunningham <66...@users.noreply.github.com>
AuthorDate: Fri Oct 14 12:34:31 2022 -0700

    Make tracebacks opt-in (#27059)
    
    Instead of showing tracebacks by default, make the end user opt-in instead.
    
    (cherry picked from commit 4b113efef1b52e2e66bae08c29fa57ca2c171996)
---
 airflow/config_templates/config.yml          | 2 +-
 airflow/config_templates/default_airflow.cfg | 2 +-
 newsfragments/000.significant.rst            | 3 +++
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/airflow/config_templates/config.yml b/airflow/config_templates/config.yml
index b20fea7ff2..9682a7f6d7 100644
--- a/airflow/config_templates/config.yml
+++ b/airflow/config_templates/config.yml
@@ -1232,7 +1232,7 @@
       version_added: 1.10.8
       type: string
       example: ~
-      default: "True"
+      default: "False"
     - name: dag_default_view
       description: |
         Default DAG view. Valid values are: ``grid``, ``graph``, ``duration``, ``gantt``, ``landing_times``
diff --git a/airflow/config_templates/default_airflow.cfg b/airflow/config_templates/default_airflow.cfg
index 174f33dbc8..38771381f2 100644
--- a/airflow/config_templates/default_airflow.cfg
+++ b/airflow/config_templates/default_airflow.cfg
@@ -631,7 +631,7 @@ expose_config = False
 expose_hostname = True
 
 # Expose stacktrace in the web server
-expose_stacktrace = True
+expose_stacktrace = False
 
 # Default DAG view. Valid values are: ``grid``, ``graph``, ``duration``, ``gantt``, ``landing_times``
 dag_default_view = grid
diff --git a/newsfragments/000.significant.rst b/newsfragments/000.significant.rst
new file mode 100644
index 0000000000..2464344284
--- /dev/null
+++ b/newsfragments/000.significant.rst
@@ -0,0 +1,3 @@
+Default for ``[webserver] expose_stacktrace`` changed to ``False``
+
+The default for ``[webserver] expose_stacktrace`` has been set to ``False``, instead of ``True``. This means administrators must opt-in to expose tracebacks to end users.