On Wed, Jul 1, 2020 at 9:05 PM Nikita Popov <nikita....@gmail.com> wrote:

> On Wed, Jul 1, 2020 at 8:55 PM tyson andre <tysonandre...@hotmail.com>
> wrote:
>
>> Hi internals,
>>
>> I plan to start the voting for
>> https://wiki.php.net/rfc/throwable_string_param_max_len on July 11, 2020.
>>
>
> Why is the lower limit of the ini setting 15 and not 0?
>

I just saw that you mention this possibility as "future scope". I don't
think your reasoning there holds up if you take into account that we
already introduced zend.exception_ignore_args in PHP 7.4 -- and which is
enabled by default in production. That removes argument information from
exceptions completely. Setting the string parameter length to 0 still
provides more information than that.

Regards,
Nikita

Reply via email to