Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:127089 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id EF2311A00BC for ; Thu, 10 Apr 2025 19:11:05 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1744312121; bh=klN6Hzb9CntcsWtROK3tzN6pvKG4HOUp656/U6m6H0Q=; h=Date:From:To:In-Reply-To:References:Subject:From; b=MmrymE4it5/ugT4Bczp1DGrBCTzjwWND3LQ5k1YGiN+1Qzgi0vSAoAV8BkarzGMAg 7P7YC1ElLfyWRxljIxHbqSnBZGsbloW21eZIkCpp8mN9DGWXyUGmmwsebzBGDYWKNz S4kgVjiAl04rFgrLvlmT18Llo0/xxDa7IN0VbgAI3LN/FB0qUqa9dxpdpYZ8wnDvBJ zoY0n72I1/I46iFDqlVdUGNsgzRZuBMKQjH3wA8DL0obNIuoHYfjADpMx0IVq1P9uZ WR7hhDgcEgkFsChnJ4d0fVi8nzPopjKgqPIchWlyh78kgBjol6GnNNzVBGTDhCwN4e SMjYw/jQ/Eagg== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id D43FE18007D for ; Thu, 10 Apr 2025 19:08:37 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_MISSING,RCVD_IN_DNSWL_LOW, SPF_HELO_PASS,SPF_NONE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from fout-b7-smtp.messagingengine.com (fout-b7-smtp.messagingengine.com [202.12.124.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 10 Apr 2025 19:08:37 +0000 (UTC) Received: from phl-compute-10.internal (phl-compute-10.phl.internal [10.202.2.50]) by mailfout.stl.internal (Postfix) with ESMTP id C492311400EC for ; Thu, 10 Apr 2025 15:11:00 -0400 (EDT) Received: from phl-imap-05 ([10.202.2.95]) by phl-compute-10.internal (MEProxy); Thu, 10 Apr 2025 15:11:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= garfieldtech.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to; s=fm2; t=1744312260; x=1744398660; bh=mNm055ajTC5ZpR7wuK9Ez /4KsnZLqjf1PqfHFONTqZM=; b=FqPA+a/C9vN+ssm2vcmH8li4gOfXj0lMtSWg/ QfkIrTEx8jcDHJmSDX/KZvTnASxxA8EimWbL7RS8oUrcZ4LYnCYlaAVOeH90JX6z CRPObRaWwC23oULxz5xgIBtFbCt4vxN65UpGIfOmnbPxfczTa5torN44s1WvZNi3 EpSk4HUAWw5jiFJKDYQHUpuwbNpq6EsDJK2/Uv+5y4CNFxI5DoNT6WD/R4ULEGoe x4pBrCwN+tdl+pMcBcKlfsCGvajlqQ7tipITeb16wXB7THIzUTasLlbBe7QuvajZ pc/4urfQOKIJEdJIL2f7n3U6hGJYujRPKG33PuCu8zN73iTmg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; t=1744312260; x=1744398660; bh=m Nm055ajTC5ZpR7wuK9Ez/4KsnZLqjf1PqfHFONTqZM=; b=I+xIAyieSkNwY7tRM u8VbB+ZyW5i+HSc7LVMBVId4fimsrFQbi+xxi/Q+zZdtwPncG4dLLxD8kXrRyt2n vHXRr6Zwdbu/pH9A8KUSuWMBjCKq+wTIVmT6W/JJmlASJGMIxg5wyNnmqnkbkmFx 4RhedCO7ffBofb9LlNzAbTJF3PoSNJeFzIe43jxWvK+HDMjUaY4KKLhssHDt3+tg wyH6Mt2WMtJbD1Qh30oFlmxAbj68lHbkQ8cLnUR76CvibLw1sExsFJEEquD7E/Lg 9XZXT47pdasmNcoJbSp209dLjQVm3am6fe/T6ZLUQQI25C7yvyT3EnQh41FYdm2O c5oJQ== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvtdeljedvucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggv pdfurfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpih gvnhhtshculddquddttddmnecujfgurhepofggfffhvffkjghfufgtgfesthejredtredt tdenucfhrhhomhepfdfnrghrrhihucfirghrfhhivghlugdfuceolhgrrhhrhiesghgrrh hfihgvlhguthgvtghhrdgtohhmqeenucggtffrrghtthgvrhhnpeeuheejudelteelieeh leelleekvddtgfettdeghffggeehvdejgeejfeffuefhvdenucffohhmrghinhepghhith hhuhgsrdgtohhmnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhf rhhomheplhgrrhhrhiesghgrrhhfihgvlhguthgvtghhrdgtohhmpdhnsggprhgtphhtth hopedupdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehinhhtvghrnhgrlhhssehl ihhsthhsrdhphhhprdhnvght X-ME-Proxy: Feedback-ID: i8414410d:Fastmail Received: by mailuser.phl.internal (Postfix, from userid 501) id 5052A3020083; Thu, 10 Apr 2025 15:11:00 -0400 (EDT) X-Mailer: MessagingEngine.com Webmail Interface Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net x-ms-reactions: disallow MIME-Version: 1.0 X-ThreadId: Tdd0aa18a8677cd59 Date: Thu, 10 Apr 2025 14:10:40 -0500 To: "php internals" Message-ID: In-Reply-To: References: <2e02e8bd16ccd8f326a014fa3812da43@bastelstu.be> Subject: Re: [PHP-DEV] [RFC] [Discussion] Change default for zend.exception_ignore_args INI setting Content-Type: text/plain Content-Transfer-Encoding: 7bit From: larry@garfieldtech.com ("Larry Garfield") On Thu, Apr 10, 2025, at 1:53 PM, Bob Weinand wrote: >> I'd rather see the value in `php.ini-production` being changed to >> `Off` to match the built-in default. see >> https://github.com/php/php-src/pull/18215#issuecomment-2768618516 > > > Full agreement with Tim here - make PHP friendly to development. > > There are only few places where secrets would be actually relevant, and > those can be covered by #[SensitiveParameter]. I tend to agree as well. #[SensitiveParameter] is the better solution in the 95% case. If there are libraries still not using it (as the RFC suggests), those should have bugs (or preferably patches) filed against them. The great thing about attributes is they're intrinsically backward compatible, so there's no meaningful cost to adding/patching liberally. --Larry Garfield