# Pp=env is scary

**URL:** <https://community.miniprofiler.com/t/pp-env-is-scary/12>\
**Category:** Ruby\
**Created:** [August 30, 2013, 6:33am UTC](https://community.miniprofiler.com/t/pp-env-is-scary/12 "2013-08-30T06:33:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nathany](https://sea2.discourse-cdn.com/flex016/user_avatar/community.miniprofiler.com/nathany/32/989_2.png) [@nathany](https://community.miniprofiler.com/u/nathany)\
**Post date:** [August 30, 2013, 6:33am UTC](https://community.miniprofiler.com/t/pp-env-is-scary/12/1 "2013-08-30T06:33:27Z")

</div>

Hey,

I’m concerned about running MiniProfiler (Ruby Edition) in production because it has this handy option to dump environment variables to the screen. It so happens that we use environment variables to store all sorts of credentials on Heroku.

Now, I realize we can only enable MiniProfiler for administrators when in production, but mistakes happen, and I really would prefer if this feature wasn’t there, at least in its current form.

Nathan.

---

<div class="post-metadata">

**Author:** ![sam](https://sea2.discourse-cdn.com/flex016/user_avatar/community.miniprofiler.com/sam/32/377_2.png) [@sam](https://community.miniprofiler.com/u/sam)\
**Post date:** [December 2, 2013, 11:07pm UTC](https://community.miniprofiler.com/t/pp-env-is-scary/12/2 "2013-12-02T23:07:20Z")

</div>

I am totally open to adding an option that suppresses some of these env keys eg:

```auto
Rack::MiniProfiler.config.hide_env = true

```

Default though should be to show it, it is invaluable when debugging some issues.