[GIT-PULLS] [php-src] PR #22938: ext/curl: hide sensitive parameters to curl_setopt

[email protected] (Sjord) Thu, 30 Jul 2026 11:56:11 +0000
Newsgroups php.git-pulls
Message-ID <W5afXybzUiyvLuXzh9kvEk1A77gLKCef8JQMthJXD8U@main.internal.php.net>
Pull Request: https://github.com/php/php-src/pull/22938
Author: Sjord

This makes it possible to mark parameters as sensitive at runtime.

curl_setopt takes many types of parameters, of which only some are secret. This tries to hide the sensitive values in stack traces, while still showing benign values.

I am not sure this is a good idea, please let me know what you think.

Ping @TimWolla, as the author of https://wiki.php.net/rfc/redact_parameters_in_back_traces.