Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:127090
Precedence: bulk
MIME-Version: 1.0
References: <CAObMQFcUB48LEusdtYNS2hnr_qyKJppC11qfbGxkOkuKQtqmEg@mail.gmail.com>
 <2e02e8bd16ccd8f326a014fa3812da43@bastelstu.be> <AM8P250MB01700E5B84594B83ED5FB56FE2B72@AM8P250MB0170.EURP250.PROD.OUTLOOK.COM>
 <a4ffe80f-95cb-4656-b167-73fd48151cae@app.fastmail.com>
In-Reply-To: <a4ffe80f-95cb-4656-b167-73fd48151cae@app.fastmail.com>
Date: Thu, 10 Apr 2025 21:03:24 +0100
Message-ID: <CAGBsUrfxCxOWDsa6A_eN1LLb8TtPjjofCbm96LpuoyZ3126FOw@mail.gmail.com>
Subject: Re: [PHP-DEV] [RFC] [Discussion] Change default for
 zend.exception_ignore_args INI setting
To: php internals <internals@lists.php.net>
Content-Type: text/plain; charset="UTF-8"
From: tekiela246@gmail.com (Kamil Tekiela)

I can't find any information on why this setting was introduced. I
guess that it was either to protect sensitive information or to reduce
verbosity in the logs, but either one seems like a poor reason for
this setting to exist. The INI comment seems to suggest that it was
introduced to protect sensitive information, but that doesn't make
sense to me since exceptions aren't revealed to the end user. And
while verbose, arguments in stack traces are useful. On top of that,
it seems to me like this is already covered by
exception_string_param_max_len. If you set the length to 0, isn't it
the same as setting exception_ignore_args to On? Or does that mean
that no truncation is applied?

I suppose if this INI setting must exist, then it should be set to Off
in both development and production environments. The max length should
probably be increased, too. I would also appreciate it if it gets
clarified in the documentation why the two settings exist and what the
difference between them is. And I wouldn't object to removing
exception_ignore_args if it's a redundant setting.

P.S. The RFC mentions execution_ignore_args too, but I assume that's a typo.