Re: RFC [Discussion]: Redacting parameters in back traces
| From: | Tim Düsterhus, WoltLab GmbH | Date: | Thu, 13 Jan 2022 09:04:26 +0000 |
| Subject: | Re: RFC [Discussion]: Redacting parameters in back traces | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-116876@lists.php.net to get a copy of this message | ||
Hi Lynn
On 1/12/22 9:30 AM, Lynn wrote:
I was thinking more of a "keep track of the values replaced, and in the end purge all those values from the end-result" kinda thing.Thank you for the clarification. This still is not in scope, because I believe that to be harmful, as the parameter redaction will be completely unpredictable. Consider a sensitive parameter that is of type '?string', i.e. nullable. Now with your proposal, whenever 'null' is passed to this parameter, all 'null's within the stack trace would be hidden, even if they are completely unrelated. Best regards Tim Düsterhus Developer WoltLab GmbH -- WoltLab GmbH Nedlitzer Str. 27B 14469 Potsdam Tel.: +49 331 96784338 duesterhus@woltlab.com www.woltlab.com Managing director: Marcel Werk AG Potsdam HRB 26795 P