Re: [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting
| From: | Tim Düsterhus | Date: | Thu, 10 Apr 2025 15:19:57 +0000 |
| Subject: | Re: [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-127085@lists.php.net to get a copy of this message | ||
Hi
Am 2025-04-09 04:00, schrieb Andrew Lyons:
The intent of this change is to make PHP installations safer by default and prevent the accidental release of sensitive information in stack traces. * RFC: https://wiki.php.net/rfc/exception_ignore_args_default_value * Implementation: https://github.com/php/php-src/pull/18215As I had said on GitHub before, but to put it onto the list for visibility: I'd rather see the value in
php.ini-production being changed to Off to match the built-in default. see https://github.com/php/php-src/pull/18215#issuecomment-2768618516
Best regards
Tim Düsterhus