Add explicit warning of exposed endpoint in wrong environment

laravel · Jun 30, 2020 · 4b07a2c · 4b07a2c
1 parent d1a2755
commit 4b07a2c
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/telescope.md b/telescope.md
@@ -115,7 +115,11 @@ By default, all entries older than 24 hours will be pruned. You may use the `hou
 <a name="dashboard-authorization"></a>
 ## Dashboard Authorization
 
-Telescope exposes a dashboard at `/telescope`. By default, you will only be able to access this dashboard in the `local` environment. Within your `app/Providers/TelescopeServiceProvider.php` file, there is a `gate` method. This authorization gate controls access to Telescope in **non-local** environments. You are free to modify this gate as needed to restrict access to your Telescope installation:
+Telescope exposes a dashboard at `/telescope`. By default, you will only be able to access this dashboard in the `local` environment. 
+
+> {note} Make sure to change the `APP_ENV` variable to `production` in your production environment. Otherwise, Telescope will publicly expose your request data.
+
+Within your `app/Providers/TelescopeServiceProvider.php` file, there is a `gate` method. This authorization gate controls access to Telescope in **non-local** environments. You are free to modify this gate as needed to restrict access to your Telescope installation:
 
     /**
      * Register the Telescope gate.