Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:121620 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 98838 invoked from network); 8 Nov 2023 16:59:23 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 8 Nov 2023 16:59:23 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 0C1D6180087 for ; Wed, 8 Nov 2023 08:59:20 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE, T_SPF_TEMPERROR autolearn=no autolearn_force=no version=3.4.2 X-Spam-ASN: AS15169 209.85.128.0/17 X-Spam-Virus: No X-Envelope-From: Received: from mail-ej1-f49.google.com (mail-ej1-f49.google.com [209.85.218.49]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Wed, 8 Nov 2023 08:59:19 -0800 (PST) Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-9c41e95efcbso1075906566b.3 for ; Wed, 08 Nov 2023 08:59:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sonarsource.com; s=google; t=1699462758; x=1700067558; darn=lists.php.net; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=e7KwVZ7n/BchycPqjUPgpjJVYJmLZg97Z87yqGVReZA=; b=B1kTEGZByeGnGSV5Z5Yx4I+2I3XW1MQzzQ55BJCGhBIzrG/EwOSbJNivb4Zy6FWPAG jAg6q4xHiwNPgcjHMgdmucNZVOWsSmVcqPPnFakrjOAzeo0SzOCEBOSWQw/0CFwnUd9/ JAhQZdZitmneNSMnpEIVfZT0QOiXqazXPNnAU1ilryVSCsoFRIv8X7bk/95OL8zXufVL yioXQhf1AFUUQee0umxW4RwoyS3FogIxc/arckeGZjv6rgAyOb1huILZqQelPo304/ff rKntv95cmXCgyhgOMd0CqsvI2YNY1c/Xb6aORQQnorykoNEN6aPrYhfUe2YSu/h/0duY vq8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699462758; x=1700067558; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=e7KwVZ7n/BchycPqjUPgpjJVYJmLZg97Z87yqGVReZA=; b=uFyekYomTtSJGvQeR7Bdz4cYdims3HqOApEOpfrC26WyMhr2dIOPjuFvj3ssTKOCyq Zbs+mQZEzjFEf8SM8RukabMFG5DdgNqF6NEs+lQJaw2G3GgoOGCaI8rTjrHqtgmEq0px jumoGYc9bhBw42NqSqvLeFweTPeH9qGVoAabYulDrr/dRJTHdX4o2dXNDwhxuZGXy6NJ BRf4EL7OhtCgqiz6HX2z0YAt5SPPZrFliQxlknflzcCiEQLMV433/m/vS6nd2n9Vw8L2 Y5aodm1vwhwCN2roeS/QrazFsN5tAP75EUgEI4Z2mGXhrkNCKa2BJshzxcDZ3jZpTisG EFVA== X-Gm-Message-State: AOJu0YxRAc649zOaCYL67ifiF6VU1PTxVyuiLzbAVeL2cQfCGG3MShmw UVroRNp8HIYwJYgQQPiVsIDw3/sKvVlGLFpKz4WvU4Pns6Ixu71LYL2kBw== X-Google-Smtp-Source: AGHT+IFjBGBemnvqDVGtNcAVW+qBWYj2vLh185JmQI1cogNMYxN3kyGm/rh/hHt0EsWxwuEkYNIA9GzYJ2YmiiX2Q50= X-Received: by 2002:a17:907:1c0b:b0:9dd:8aa0:f7b8 with SMTP id nc11-20020a1709071c0b00b009dd8aa0f7b8mr2203255ejc.9.1699462758002; Wed, 08 Nov 2023 08:59:18 -0800 (PST) MIME-Version: 1.0 References: <0fde7cd8-3913-4552-b67b-9c3670f5a2e6@beccati.com> In-Reply-To: <0fde7cd8-3913-4552-b67b-9c3670f5a2e6@beccati.com> Reply-To: Thomas Chauchefoin Date: Wed, 8 Nov 2023 17:58:42 +0100 Message-ID: To: internals@lists.php.net Cc: Matteo Beccati , sebastian@php.net, george.banyard@gmail.com, kevin@dunglas.fr Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: Re: [PHP-DEV] Set register_argc_argv to Off by default From: internals@lists.php.net ("Thomas Chauchefoin via internals") On Tue, Nov 7, 2023 at 11:46=E2=80=AFAM Sebastian Bergmann wrote: > Am 07.11.2023 um 11:33 schrieb Thomas Chauchefoin via internals: > > For instance, the official Docker image has it on [2]. > > "Official" is relative here. That image is maintained by (the) Docker > (community), it is not maintained by the PHP project. Indeed, my bad. I've updated the GitHub issue to reflect that this Docker image is not maintained by the PHP project. On Tue, Nov 7, 2023 at 2:12=E2=80=AFPM K=C3=A9vin Dunglas wrote: > This change seems reasonable to me: safer, with little chance of breaking > things, and easy to reverse for the end user by changing a single paramet= er. On Tue, Nov 7, 2023 at 5:33=E2=80=AFPM Matteo Beccati = wrote: > Seriously though, I do agree with changing the default. I believe such > check was added in a time when it was still common to use the cgi > executable to run cli commands and the configuration was shared with > mod_php. On Tue, Nov 7, 2023 at 4:48=E2=80=AFPM G. P. B. = wrote: > This sounds sensible to me. Thank you for your early feedback on this suggestion. Without rushing things, I assume that the next step for me would be to draft an RFC to formalize this change? Best, -Thomas