On Wed, Jul 1, 2020 at 9:05 PM Nikita Popov <nikita....@gmail.com> wrote:
> On Wed, Jul 1, 2020 at 8:55 PM tyson andre <tysonandre...@hotmail.com> > wrote: > >> Hi internals, >> >> I plan to start the voting for >> https://wiki.php.net/rfc/throwable_string_param_max_len on July 11, 2020. >> > > Why is the lower limit of the ini setting 15 and not 0? > I just saw that you mention this possibility as "future scope". I don't think your reasoning there holds up if you take into account that we already introduced zend.exception_ignore_args in PHP 7.4 -- and which is enabled by default in production. That removes argument information from exceptions completely. Setting the string parameter length to 0 still provides more information than that. Regards, Nikita