kavinsky/FuelPHProfiler — comment on commit f886a55248ae7e8be6dcbfabcbf760b466d0e677
File: classes/profiler.php line 106
By msaspence:

I've been quite worried about the security of the profiler given the amount of info you can glean from it. I have implemented something similar to this in my config files but strongly believe packages should be secure by default.
False should be a valid option in the config file so that they can still disable it entirely if they want, that way devs have to do something to make it less secure rather than having to do something to make it more secure.