There is a more comprehensive way that we prefer to use, which is to check in the middleware, and then check for that middleware variable in the blade. That lets people test in “production” (which may be behind internal firewalls so reasonably safe) but also lets us expose the “you’ve got debug turned on in prod!!!” message in the default layout blade in a way that can’t be missed. https://github.com/snipe/snipe-it/blob/master/app/Http/Middleware/CheckForDebug.php
Security Tip: Disable Debug Mode on World-accessible Apps
There is a more comprehensive way that we prefer to use, which is to check in the middleware, and then check for that middleware variable in the blade. That lets people test in “production” (which may be behind internal firewalls so reasonably safe) but also lets us expose the “you’ve got debug turned on in prod!!!” message in the default layout blade in a way that can’t be missed. https://github.com/snipe/snipe-it/blob/master/app/Http/Middleware/CheckForDebug.php