Cannot set errors.display to -1, leaking full backtrace

[tribut]

When the admin interface is used to set the config setting error.display, it is impossible to set it to -1 (System error). The yaml file after saving looks like this:

errors:
  display: '-1'

Note that display is set to the string -1 due to the quotes. Grav later checks the setting using is_int and then discards the value.

This is an information disclosure security vulnerability, because Grav falls back to the full backtrace(!) when the user presumably wanted to make sure to leak as little information as possible.

[rhukster]

What version of grav? This has never been an issue before. I will need to investigate why this is happening now.

[tribut]

Sorry for not mentioning versions: Grav v1.4.5 - Admin v1.8.2

[rhukster]

Fixed here: getgrav/grav@636bc97