diff --git a/app/controllers/general.php b/app/controllers/general.php
index 23d1b75b1b..56d9c3f6f2 100644
--- a/app/controllers/general.php
+++ b/app/controllers/general.php
@@ -947,6 +947,8 @@ App::error()
 
         $type = $error->getType();
 
+        // TODO filter out secrets and server details when not in development
+        // but devKey is provided
         $output = ((App::isDevelopment()) || (!$devKey->isEmpty())) ? [
             'message' => $message,
             'code' => $code,