Manual:$wgDebugAPI/en

Details
When true, some security-related restrictions are loosened. For example POST-only requests can now be made as GET. ApiBase::dieWithErrorOrDebug will only set a warning instead of failing. An extra warning header will be added in the response if enabled.