You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A new attribute named #[SensitiveParameter] has been introduced in PHP 8.2 to prevent sensitive method arguments to leak in application logs, exceptions and backtraces. I think this would be great to add this attribute across the framework.
The text was updated successfully, but these errors were encountered:
alexandre-daubois
changed the title
Add #[SensitiveParameter] attribute to password arguments across components
[RFC] Add #[SensitiveParameter] attribute to password arguments across components
Jul 5, 2022
Description
A new attribute named
#[SensitiveParameter]
has been introduced in PHP 8.2 to prevent sensitive method arguments to leak in application logs, exceptions and backtraces. I think this would be great to add this attribute across the framework.Here is the RFC: https://wiki.php.net/rfc/redact_parameters_in_back_traces
Human-readable RFC: https://php.watch/versions/8.2/backtrace-parameter-redaction
Here is the commit to
php-src
: php/php-src@9085197I create this RFC to discuss if there is any contraindication to do this. You'll find a simple example below on how it would look like.
Example
Password credentials
HttpOptions
The text was updated successfully, but these errors were encountered: