Issue #3478716: [D7] Full path disclosure from errors on maintenance pages

Issue #3478716: [D7] Full path disclosure from errors on maintenance pages

Closes #3478716

changed the description

changed target branch from 11.x to 7.x

changed title from git commit -m 'Issue #3478716: [D7] Full path disclosure from errors on maintenance pages' to Issue #3478716: [D7] Full path disclosure from errors on maintenance pages

The issue here is that during Drupal boostrap phases, configuration runs before variables are loaded. The error is always shown, because default was show all errors. The current change just edits the default value to none as default. It solves the security issue, but it doesn't fix the underlying problem. Where you never get the correct value from variable_get, when the function gets triggered before variables are loaded.