Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:116999 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 66819 invoked from network); 7 Feb 2022 15:20:58 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 7 Feb 2022 15:20:58 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id A0C391804C3 for ; Mon, 7 Feb 2022 08:36:43 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS15169 209.85.128.0/17 X-Spam-Virus: No X-Envelope-From: Received: from mail-vs1-f53.google.com (mail-vs1-f53.google.com [209.85.217.53]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Mon, 7 Feb 2022 08:36:43 -0800 (PST) Received: by mail-vs1-f53.google.com with SMTP id t20so245930vsq.12 for ; Mon, 07 Feb 2022 08:36:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=basereality-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=BwjsPGyrkjwIQr60hrdW1sB4kFgDlDCJ6Pl0fcHrRy8=; b=3o/x3w4U0KMMfR8hgeHuDFw536rgp4fBbfisn487afufJw1VKbCwhlnRKtkmZBRAEp nCZpevCqNz4UB54yQtlvyje3x25z4p8eIXwQ6sRZ3qRYL4sC/NlL28UxteJVxYGcrlkn pjymIW3CHD4ZL/Gk64PL9w1vsKHLOUtJ3vluVaTB7MOgyMtx0iVO9hqVDs+UX+HIQy+5 ABvuxLMjlRWyXWKVfZVJLwHZwHUhid+VgrujXk0CzyR+dLp8SW/fcH5AoZCzdSIvP2Ky hh0uAv/GMb5cesunTGjCQvOaTSr5iP1hFJiQ2fmlPmp6SQs5ONV3gsJvozGay0qOwUUg OOvQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=BwjsPGyrkjwIQr60hrdW1sB4kFgDlDCJ6Pl0fcHrRy8=; b=K/CC4vSSrlkkjlL6yg1GFCbTtSyYmJe0V1eMIsHGWeSYr8FWN+QtW9tQlKIcLBax2T OaEFj9KZP4EcEUlh6zfPo1NJVW323nZD17yaDitFtoCuA2IUGMxxgnpA96HvPFptomL3 pr9+gJpzJRvEpV808vPIa0z6mbEspEhCF5RZvM5CJyM7IZSk3+4WkNEoKAKXH0G2xFTA 3dkr29i7JXn9OmCFLAW/+mVW+J/w0QwkyRd9ypjjmaDKVhwriEgVa+vZqHKgQ3lKrUFg 2IDZ73XVVcSPN6Ipt73jsN2xfordo0Er27r6en/kYboS48+utAmGd9p1Shdl63yPMEBi ncvA== X-Gm-Message-State: AOAM532qJlvj5gTjlKJjX8WOGOFzqkHtw8sDjIvmv1ZGPXM/N3He5/G1 14UXdFdfa4vvxws/BAXViW4EJ0Cat54qo4aUuE27cWg38iY= X-Google-Smtp-Source: ABdhPJxGRQ3cDO7IK1xykZPMuUYkLxlqiGwSUFkl2qRoRmK7tbHBsdu6yk/IZML2Ae1AbUKRaNHuIUGLKRjHRm+vJ00= X-Received: by 2002:a05:6102:320d:: with SMTP id r13mr170263vsf.42.1644251801948; Mon, 07 Feb 2022 08:36:41 -0800 (PST) MIME-Version: 1.0 References: <01c3082c-c69d-7337-64f7-8314ade305a2@woltlab.com> In-Reply-To: <01c3082c-c69d-7337-64f7-8314ade305a2@woltlab.com> Date: Mon, 7 Feb 2022 16:36:27 +0000 Message-ID: To: =?UTF-8?Q?Tim_D=C3=BCsterhus=2C_WoltLab_GmbH?= Cc: PHP internals Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] RFC [Discussion]: Redacting parameters in back traces From: Danack@basereality.com (Dan Ackroyd) On Tue, 11 Jan 2022 at 09:11, Tim D=C3=BCsterhus, WoltLab GmbH wrote: > > So basically all the other languages I researched do not provide > arguments within back traces. Uh, that kind of suggests that providing arguments at all is a mistake, and that removing could be the way to go. I mean other than everyone complaining about the BC break. An awkward question; why is this hard-coding of the behaviour dependent on a new attribute the correct thing to do? PHP allows people to set_error_handler() to process errors how they like. Conceiveably, allowing users to set a custom function to redact data from stack traces would allow users to inspect and redact the parameters however they like. Why is adding a special attribute that is recognised by the PHP engine itself the right thing to do? To be clear, I can think of at least two reasons. But also, I think every attribute that is proposed to be added to PHP core, needs to have the reasons why it's the right thing to do listed. If nothing else, it will help to reject attributes in the future if they don't have the same strong justifications. cheers Dan Ack