[wp-trac] [WordPress Trac] #47058: Site Health Check: does not distinguish between production / staging / development sites
WordPress Trac
noreply at wordpress.org
Sat Apr 27 15:18:43 UTC 2019
#47058: Site Health Check: does not distinguish between production / staging /
development sites
----------------------------+-----------------------------
Reporter: DavidAnderson | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Administration | Version: trunk
Severity: normal | Keywords:
Focuses: |
----------------------------+-----------------------------
In a ticket focussed on a different issue -
https://core.trac.wordpress.org/ticket/47046 - the problem was raised that
if `WP_DEBUG` is on, then the "Site Health Check" will raise this as a
"critical security" issue. The current justification for that is given in
https://core.trac.wordpress.org/ticket/47046#comment:9 is "You should not
be running WP_DEBUG on a production site".
However, currently Site Health Check has no concept of whether a site is
production, staging or development. It just shows the message.
Arguably, if WP_DEBUG is on (and in the ticket above, it was on
localhost), that's partial evidence that it's not a production site. We
don't want users to ultimately learn that "Site Health Check is full of
unhelpful approximations, basically, just ignore half of what it says".
Some possible solutions:
- Remove the check entirely
- Don't label it as a "Critical Security" issue
- Introduce a "Production / Development / Staging" switch and then make
tests behave different depending upon the value
--
Ticket URL: <https://core.trac.wordpress.org/ticket/47058>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list