[php-src] PR #23782: Add #[\SensitiveParameter] to more functions taking secrets
| From: | jordikroon | Date: | Sun, 20 Sep 2026 00:01:32 +0000 |
| Subject: | [php-src] PR #23782: Add #[\SensitiveParameter] to more functions taking secrets | ||
| Groups: | php.git-pulls | ||
| Request: | Send a blank email to git-pulls+get-38610@lists.php.net to get a copy of this message | ||
Pull Request: https://github.com/php/php-src/pull/23782
Author: jordikroon
Several functions still accepted passwords, keys, etc without marking them as
#[\SensitiveParameter].
This may (likely) not be complete, but this is what I could find.
As mhash is deprecated I was debating if we should include it, but I don't see any
downsides. It's a free protection for those who still rely on it.